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ABSTRACT 


This thesis discusses the development cf an intéxrconnec- 
P=Gie OL Steen POINnt Legisties’ Integrated Communicaticns 
Envirenment (SPLICE) local area networks with the Defense 
Data Network (DDN). Mae “interconnection 1s done through 
what is called the National Communications (NC) module. 
After an introduction to SPLICE and DDN, a User's Manual for 
NC is presented, defining the environment and interfaces of 
NC. Then, the mctivation behind the NC design and its cper- 
ational context is explained in detail. Implementation 
issues are discussed next. Fanaliyeeene Structure or NC is 
depicted by HIPO charts, pseudo-code and Ada language 
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A. DISCLAIMER 


The ideas and cpinions expressed in «his thesis are 
entirely these of the authors and do not necessarily repre- 
sent the position of, or an endorsement by, the Naval 
Postgraduate School, Naval Supply Systems Command or Fleet 
Ntcermats SUbpOrt Office. 

Scmé terms used in this thesis are registered trademarks 
of ccmméercial or government CORCerINS.« Rather than 
attempting tc cite each individual occurrence of a trade- 
mark, all registered trademarks appearing in this thesis are 


listed belcw, following the firm holding the trademark. 


Department of Defense, Washingtcn, D.C.: 


al Eouipment Corporaticn, Maynard, Massechusetts: 
Were, Un cUS, LSI=-11, O- Bus 


Be SFLICE BACKGROUND 


The present Navy Supply System consists of approximately 
Semswecexeecinc (SP) and Inventory Control Point (ICP) £acil- 
ities, all running the Uniform Automated Data Processing 
System - Stcck Points (UADPS-SP) on Burroughs medium size 
computers (28-3500 thrceugh B-4800). Normally, each SP main- 
*ains two cf these computers. The supply system aiso 
contains twce ICPs, each using the UNIVAC U494, Many “«ran- 


Sacticns entered into the supply system are precessed ina 


batch mcde. At several sites, some of the nore specialized 
applicaticns are processed on snaller "standalone" 
computers. Their cutput eventually is integrated with 


UADES-SP usirg an offline entry system. 
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The Stock Point Logistics Integrated Communication 
Envircnment (SPLICE) is being developed to augment the Navy 
Sop ly E-cint and Inventory Control Point facilities. The 
main cbhjective of SPLICE is to provide economical and 
responsive support capabilities by decentralized communica- 
tions [Ref. 1,p.1-2]. TO support this objective, SPLICE 
must meet two important needs. First, the increased need 
for interactive communication and second, the need tc stand- 
acrdizewsupely site interfaces. Since input terminals play a 
major «cle in meeting both of these needs, SP LIGt oes 
designed to efficiently manage the myriads of input devices 
that are and will be available. 

In short, the SFLICE subsystems will act as a front-end 
BEecececc=: tC the Current Burroughs hosts, offloading ccmmu=- 
hication processing from the hosts, and adding intezactive 


processing. 


C. SFLICE CONFIGURATION 


The preposed SPLICE system will consist of standard 
hardware and software located in minicomputers at each SP 
and ICPe The minis will be tied together as a local area 
network (LAN) and ¢ach LAN will be connected together 
through tke Defense Data Network (DDN). 

The SELICES voroject will progress in several phases, the 
final integrated system appearing somewhat like Figure 1.1 
{Ref. 2,p.2-24 j. Nete that the Burroughs mainframes are 
Supported by the SPLICE subsystems and are integrated into 4a 
LAN. Mee SLAN et Gach stcck point is tied together bya 
commen internet--the DDN. There are also plans to add cther 
hosts to scme of the LAN's. [ Ref. 2,p.2-23]} 

Figure 1.2 { Ref. 2,p.3-3] is the way the Fleet Material 
Support Office (FMSO) views the SPLICE software configura- 
tion at each LAN. The Burroughs hosts will be running ina 
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Figure 1.1 
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backgreund mode, PLOcessing@miarge . foe handling actions, 
while a complement cf minicomputers will be running ina 
foreground mode. The minis will support the hosts with 
communicaticns and interactive update capabilities. The 
envisioned software suite is centralized, with the Complex 
Manager acting as the arbitrator for all foreground activi- 
ties. This implementation will provide for high system 
availability through a highly redundant hardware and soft- 
Pee wGOmragutaticn. (Ref. 2,p.3-2,3-3] 


D. SPLICE FROJECT AT NPS 


iieeceoner&ast to the FMSO design, «he SPLICE functional 
design apprceach being used at the Naval Postgraduate Schcol 
is directed toward developing a logical or virtual LAN 
EeEoetzeetaus ensuring that the functional requirements are 
satisfied. This is done Ly developing several functional 
modules, distributed in minicomputers throughout the LAN, 
with the necessary ccmmunications protoccls to support then 
fRef. 3]. All functional modules wili operate indeéepen- 
dently, reacting only to messages from other modules. As 
Sepeosecdu tO the FASC concept, there is 216 notion of a 
centralized manager. The NPS design allows for higher 
System availability than the céntralized approach, since 
functicnal mecdules can be moved from one physical node to 
another, without changing their logical addresses. The 
propesed functional mcdules will include the following: 

°* Terminal Management (TM) 

e Session Services (SS) 

e Naticnal Communications (NC) 

e CLatarase Management (DEM) 

e Reccvery Management (RM) 

e Rescurce Allocation (RA) 

e Feriphéral Manacemen* (PM) 


liz 





Figure 1.3 shows the proposed physical view cf ths 
Beeece LAN) contalning functional modules in a4 network of 
Minis, communicating through a bus. Other sufrerting 
Peocecses that are necessary for interface with SPLICE hard- 
ware include; 

e Buffer Manager 

e focal Communicaticns 

e Message Server 
hese processes will be contained in each of the physical 
processors in the LAN, corresponding somewhat to the “inter- 
aoaeo sport. ch of Figure 1.3. in a2ddiciOn,e cach “func zona! 
module will have its cwn cory of the Message Server. 


EF. FUNCTIONAL MODULE OVERVIEW 


The discussion in this section will be limited to a 
general cverview of the SPLICE functional modulés. Changes 
made to the module design in [{Ref. 1], assumptions and 
mitetrace cOnsideraticns will he covered ina later chap- 


eers. 


1. Terminal Management (TM) 


This module includes terminal user message editing, 
screen management and virtual terminal cperations. The 
Network Virtual Terminal protocol contained herein, Wz) 
have the ability to cenvert differing terminal formats to a 
standard LAN format. It will also give the user the cafpa- 
kility tc design his own screen format, Wwiiten Will enackle 
him tc tailor his system to his own needs. 4ost. ¢facne 
netwerk sessions will up between Terminal Management and 


some cther medule (mcst likely Database Management). 


as 
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This module will be used +90 open and close interac- 
tive and deferred sessions with both local and remcte 
modules. It will do this by retrieving both the logical and 
physical addresses of the destination module from a Network 
Sérvices Directory. This directory, which will include the 
salaresses Of all modules within SPLICE, will te kept current 
by the Network Management Center for SPLICE. 

Session Services will also contain the Mailkox 
Manager. This process will te invoked when inccming or 
cutgcing messages are addressed to an inactive process or 
LAN. The Mailbox Manager will store the messages in the 
appropriate mailbox and deliver them to the destination 
process when it becomes active again. 


The functions of the Database Management mcdule 
consis* cr database guery processing and file maragement. 
This twcdule will be active in many of the SPLICE Sessions, 
Senece obi ECh usets will want to query cr update their da<a- 


bases on a regular basis. 


4. Recovery Management (RM) 


Biestest NM PeCrtant LUNGTION eeof this module is to 


meeieMremneeG very £rom error conditions. These errors ccndi- 


tions include reports from cther precesses concerning nonre- 
svonding SPLICE local modules or remote LANs. RM will also 
be responsitlie for Network Services Directory maintenance. 


This maintenance will normally be initiated by periodic 


updates from the SPLICE Network Management Center. 
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5- Rescurce Allccator (RA) 
This functicnal module manages a pool of shared 
resources, including memory tuffer space and disk drives. 
It will fill requests from individual Buffer Manager 


processes, allocating more main 


+O a precess that has exhausted 


6. Feripheral Management 


The functions of this 


commands +c line printers and 


memory or disk storage space 


its preallocated space. 
(PM) 


mcdule will include processing 


card readers and punches. 


T« 


Local Communications, Buffer Manag 

to the 
They will act as the interface between «he modules 
of the LAN. 


main functicns center around handling message traffic. 


Message 


Server processes will exist as servers EuUne t20nat 
modules. 


and the lewer level hardware and software Their 


F. THE DEFENSE DATA NETWORK 


SELICE Internetwork Aiternatives 


The interconnection of SPLICE LANS by some lcng haul 
would result ina real improvement cver the off-line, 
AUTODIN 


network 


means 
Suciea 
one LAN 
as interactive, 
LAN. Tid S Sede 


to the use of some long haul communications circuits 


which is presently used. 
EOL eo LLC E 


*ypes of operations such 


Pecemmunica-icns 


might also allow users in to 


perfcrm cther new 


cn-~line queries cf a database in a distant 
equates 
with 


flow cf data or messages between SPLICE LANs. 


scmé means, aS 4& Minimum, to facilitate and manage the 
Getons £OE FEOViding these Cireuits include: 
isecalliech ind a dedicated poln=—-to-polint or a distrip- 


uted network just for SPLICE use. 
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Ze Contract to use a cCccmmercial network for specific 
services. 

3. Utilize existing DOD systems. 
maenctce dcing into details, suffice it to say that opticns 1 
and 2 are less feasible than 3, especially considering 
factcrs such as cost, security and survivability. The SFLICE 
project accepted, rear the outset, a commitment to use 
existing TOL systems. This selection may appear as a fere- 
gone conclusion but it should be emphasized that the cther 
two opticns have been selected frequently by government 
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Figure 1.4 DDN Host Interface Options. 
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agencies faced with similar internetwork requirements. This 
trend was, in part, the motivation for the creation of the 
Defense Data Network (DDN). Previous SPLICE efforts focused 
on the CLN's predecessor, AUTODIN II [{Ref. 2], but the 
current efferts are focused on utilizing existing ARPANET 
technology in developing the DDN. 


oer es  intercennection with the DDN 


2 ee eS ae SP wee SE ee eee SP Se GS SS 32-2 ae ee SS 2 > ae 


As depicted in Figure 1.4, the DDN offers frospéec- 
GivemuUseme oS basic interface options [Ref. 4,p.162]. The 
last option is not desirable as it greatly limits the DDN 
services accessable Fy the host. The direct interface 
Gon -radicts Cne of the design goals of SPLICE: to cff-load 
the communicaticns cverhead and software from the host. 
Thus, tke most feasible option is to support a Host Front 
End Processer (HFEP) approach. The HFEP can be accomplished 
most easily by on2 cf two standardized configuraticns as 
Sitowmomene Figure 1.5 (Ref. 4,p.56}. SPeUECE (Ss DDN treattic 
requirements are not anticipated to require high veclume 
Sune rt . * is conceiveabl¢ that the interconnect will be 
Supported by an LSI-11 microprocessor (or other) board 
Paceagibedsinm a SPLICE FEP to provide for part of the pfhys- 
ical linkage to an IMP gateway. This option could previde 
for up to a 64 KB per second transfer rate. 

Cne important distinction should be made concerning 
the HFEF approach. From the DDN point of view, the HFEP is 
Suppcrcing a "host". From the SPLICE perspective, the HFEP 
Toeticmsrtiecr Front End Processor (FEP), and in DDN termi- 
MOlLOgystt 1s the “hcst." There is a requirement tc imple- 
ment the host-to-front-end protoccls (HFP), shown later in 
Figure 12 9., in whatever is considered the hose 
ket. “,p.164 ]. For reasons stated earlier, the SFLICE 
eemmodemmss tO Off—lcaed the SPLICE hosts, and to place then 


wieecnemerackground fiRef. 1t,p.1]- Consistent with this 
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Fi queze. 1.5 DDN Host Front End Processor Options. 


appreach is to consider the SPLICE FEP as the DDN host. One 
May e€ven consider NC to be the sofiware which supforts the 
Hier Ar; r cach. 

Bhesactual Interconnection of the HFEP would addi- 
tionally require a high speed modem and a dedicated communi- 
Gare O=]= Girculc to the nearest DDN INP gateway. Aor 
these physical interface components have considerable 


capacity for expansicn. 
Beeline PsCtccols 
a. Overview 


Using the DDN naming conventions, four major 
groups of protocols exist. These are depicted in Figure 1.6 
fjec ei eeiosy]) «6tO 6Sépresent the physical locations where 


these fpretccols reside. As contrasted with the IS0/cCSI 
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Figure 1.6 DDN Protocol Hierarchy. 


reference mcdel layers, these DDN names map to the medél as 
O Soeeagure ./ [Rer. 1,p-5-6 ]. 


Ev Ne+work Access Protocols 


Network access protocols define the irterface 
between a host and a switching node. Orly hosts or their 
logical egquivalent--such as a Front End Processor (FEP) of 
SPLICE--are suppcerted directly by a switching node cr IMP or 
gateway. These protccols encompass the physical, link énd 
network levels of tke OSI reference nodel. DDN prevides a 
Tange cf crtions for these layers of pretocols, So as tO 
accomodate the great spectrum of present and future users. 
These mec rocols are Lllustrated in Figure ice 
fRef. 4,£.-156]. 
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Figure 1.7 DDN Protccols and Corresponding ISO Protoccls. 


Along the tep cf Figure 1.8 we see the general 


categcries cf pretoccls of the DDN design: 


The 1822 is a BBN developed protocol whick is currently 
in use in the ARPANET C/30 IMPs and TACs. 

The HDH or HDLC Distant Host Protocol spawns from ISO's 
(HLLG) SHiegh Level Data Lank Control, which is actually 
cumpctrtcomang Of LEM®s Synchronous DavaeLlink Control 
(SEC). 

The Very Distant Yost (VDH). 

The Segment Interface Frotocol (SIP) 1s unique tc the 
SACLDIN lnterface. IESE uses the Advanced Data 
Ccmgzunicaticns Centrol Protocol which was derived by 
aed creme PEN's SDLC. 

Supperting the X%.25 standard should provide more lati- 
tude for SPLICE ridders and equipment vendors. This is 
not currently supported on the ARPANET and is a current 
design effort of the DDN. 
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All of these access protocols are interface 
protocols between the switching node and host (or SFLICE 
FEP) which it serves. They permit reliable transfer of data 
into and cut of the subnetwork. They also provide varying 
levels cf assurance that the data successfully traversed the 
nétwork and provide subnet and subscriber status infcrma- 
[womens The ~EOLOCOLS do not, however, provide for the reli- 
able host-tc-host or peer level commurication. Ror Sy Elose 
this and cther aspects of the transport level protoccls, DDN 
provides the Transfert Con crore recOCcol, M(TGE)/ Internet 
Frotocol (IF). These TCP/IP protocols could be implemented 
in the hests themselves or, as in the expected SPLICE énvi- 
Boumenmt ew tin the FEP (of possibly, HFEP to the SFLICE 
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Figure 1.9 Physical Location of Interface Protocols. 


Bee) Cné final way to depict these pretoccls is as shewn 
in Figure 1.9 {Ref. 4,p.162]. Figure 1.9 represents the DDN 
Sencereeana SPLICE will likely modify this in consideration 
Cr its intert to write its cwn application, presentation and 

ssion layers. The interface between SPLICE and the DDN 
Beleesthee E€ntail the correct interaction of the SPLICE 
National Ccmmunicaticns Module and the TCP/IP eErcetocols. 
The SELICE FEP must provide the environment to support this 


‘Taree race1cn . 
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Ge. THE NATIONAL COMMUNICATIONS MODULE 


1. Overview 


The National Communications (NC) Module will serve 
Bemtneertace =he SPLICE LAN to the DDN and vice versa. In 
shis rele at a "gateway" tc the DDN, the NC also isolates 
the LAN from the DDN in that the DDN protccols will rot have 
to be implemented internal to the LAN [Ref. 5]. Because of 
the inherent difference in speed of transmission between +he 
LAN (1-2 MBES) and the DDN (9600-56 KBPS), NC must control 
the frequent buffering of outgoing message traffic. Clesely 
associated with the buffering control is the requirement for 
NC to previde for sequencing of LAN messages and message 
fragments. Thi¢ is in part due to the requirement that 
there be cnly one unacknowledged message for a given session 
between any two NC nodules on Gat So monet LANs 
Pret. 1,6.28,34 ]. 


2. LUssign Goals cf£ the National Communications Module 


Seme undérlying design objectives were developed for 
sne NC ocduis. a 

Giee se LiCk user ne 
Sew eingeetsamarily cre Transpert Control Protocol (TCP): 


M 
hese goals resulted from consideration of 
2 


ds as well as the planned operaticn of 
E 


a. Transparency to User 


The user should be provided with the illusion 
that there is only one global SPLICE network. The physical 
reality cf rultirle LANs tied together by the DDN shouid set 


Eo apparent to a user. Except for possible transmissicn 
delays, he will utilize a process ina distant LAN in 
exactly the same way he will utilize a local process. This 


will be accemplished by the “hidden"® interaction of the 
user's precess, Sessicn Services, NC and the DDN. Thus, when 


auser cna terminal in a California-based LAN wants t9 
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query an on-line database located in a Pennsylvania-based 
LAN, he will open his session in the same way as he would 
with his local datakase system. This requires the funrc- 


tioning cf the NC and the DDN to be invisible to the user. 
b. Interactive and Deferred Service 


There may be times when a user does not desire 
interactive service with ancther process (local or distant). 
This is apparent when a user communicates with a background 
processcr, where precessing requests and transactions are 
queued for later batch processing. Another example sinilar 
to the previcus datakase example, would involve a user who 
wants to submit a jok to a distant database process. The job 
may ke lengthy and he may want +o do other things while the 
job 1s being processed by the distant database process, What 
the user sheuld expect is that he can send a deferred (nern- 
interactive) transaction to the destination database system. 
After the database system completes the transaction it 
should send back the results, which the user can chtain 
during a future (deferred) s¢ssion. One cf the basic prop- 
erties of this service is that the user does not expect an 
interactive or quick turn-around response for his session 
messag2. This supports «he notion that interactive sessicns 
should be given preference over deferred sessions cf equal 
Beecedence Obyprilority. For NC, this means that interactive 
sessicns shculd be given preferential handling over deferred 
sessicns cf equal precedence. This will help minimize the 
transmission delays that an interactive user might perceive 


if the NC is supporting his session. 
c. Precedence 


While one may surmise that most users of SPLICE 
Will operate at a single level of precedence (prokacly 
Routine), higher priority capabilities should be provided. 
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The DIN will support Routine, Priority, Immediate, Flash and 
Flash Override. It is concievable that SPLICE requisitions 
under emergency or wartime conditions might require prece- 
dences up tc and including Flash message handling. Therfors, 
the NC sheuld be able to handle sessions cf different rfrece- 
dences, and should clearly process messages of higher prece- 
dence befcr2 those cf lowar precedence. While this would 
need to ke implemented throughout the LAN FMs, it has 
peecial CGennctations fer NC. 

One should note, while addressing issues of 
preferential handling, that there still is a need tc handle 
contrcl messages before any other messages (Ref. 1,p.26]. 
All this has the effect of establishing two sets of prece- 
dence queves anda special control message queue that all 
processes wiil maintain for servicing messages. The centzrol 
queue will contain centrol messages and will be serviced 
refore any cther message, even a Flash message. The cther 
queues belong either +0 those with interactive messages or 


those with deferred messages. 
qd. TCP Insurance 


TG 1s funct ionelly specified tec provide 
mo...réliable interprocess communication between pairs of 
DIOCESSeS in host computers attached to distinct but inter- 
connected computer communication networks" [Ref. 6,p.1]. 
ICP is intended +o previde quaranteed sequenced delivery of 
messagé cr message fragments over the DDN; hcwever, SFLICE 
intends tc provide a level cf "insurance" on TCP's guarantee 
(Ref. 1,£.34]}. Specifically, this will require the source 
NC tc employ a stop and wait acknowledgement method whereby 
only one unacknowledged message or message rragment wiil be 
cutstanding (with the destination NC) at any time. The 
scurce NC must await acknowledgement by the destinaticn NC 


before any further messages will be sent for a particular 





sessicn. This equates to a high level NC to NC acknewledge- 
ment. This is done in addition to the acknowledgement and 
sequencing performed ky TCP. 


€. Insulate LAN from DDN Protocol Overhead 


AS menticned previously, the NC "gateway" action 
also serves to insulate thea LAN from the DDN protocol over- 
head. Very simple and, hence, very fast pretocols can be 

tilized within the LAN and NC will support the transition 
from the simple to the cemplex protocels of the DDN. 
Therefcre, our design should insure that little protocol 
overhead is induced cn the LAN side in order to support the 
LAN's intercennection with the DDN. The barrier to this DDN 
overhead must be constructed within NC. 


f. Design Independence and Modularity 


This NC design is being attempted in the pres- 
ence cf scme very key unknowns. The hardware and the cpe¢r- 
ating system of the front end processor is net presently 
fixed acr is the software (or hardware for that matter) 
implementation of TCE known. One can speculate at great 
length about these unknowns and the design's critical effi- 
Peo Tc yecOUlLG gail OF succeed upon those unknogns. Thus, it 
is imperative that this design retain as much independence 
from the unknowns as possible. To that end, informaticn- 
hiding techniques and data structure modularity are felt to 
be important design requirements for this stage of the 
project. Where possible, one should isolate the systen- 
dependent calls or parameters to a single module. This will 
greatly ease any implementation of the design as well as 
improve its portability and maintainability. One must 
certainly ncte the arguments against such modularity: 


one of the chief Villiérs in 


Vee MOAULALL is . é 
obtain good performance, so that the 


ee my 
atc<ecmpcing to 
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designer is faced with a delicate and inevitable 
tradeoff between gcod structure and good performance. 
Further, the single factor which most strongly dster- 
Mines new well this conflict can be resolved is not «he 
protoccl kut the operating system." {Ref. 


This design effort cannot really begin to measure the effect 
of its mcdularity vis-a-vis the efficiency issues, and only 
an actual Lmplementation will reveal such flaws. 
Nevertheless, the NC design is aimed at identifying and 
addressing all the NC requirements in a clear high level 


design structure. While the design may not ultimately 
reflect an efficiency-tuned implementation, it should 
provide a valid framework for the alyelpOnegeltr. d cr dal 


lmplementation. 


H. DESIGN APPROACH 


The National Communications (NC) module will previde for 
the use cf the DDN backbone to interconnect dispersed SPLICE 
LANS. This thesis examines how NC will accomplish this by 
Meckling L£lrst at the interface on the LAN side of Nc. This 
amounts tc atype c£& "user's manual" where users are the 
peuerePunct2onal Modules within the LAN. The requirements 
ef the NC medule and its subcomponents are examined next. 
Fenally, seme of the pertinent implementation issues 
concerning the NC and other SPLICE modules are addressed. 
This work is intended to explore the details of the SPLICE 
modules (especially NC), and as a first effort towards 
actual isplementaticn, one must anticipate that the NC 
design will evolve with later work on the project. A number 
cf previcus SPLICE cencepts needed careful compromising and 
crefinement as the NC design evolved. It is thus expected 
that future work will result in Similar design tradeoffs as 


the cthsr SPLICE modules enter a more detailed design staqe. 
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II. NATIONAL CCNMUNICATIONS MODULE USER'S MANUAL 


See __ aS Se pu ce = Se eee SST 


A. PURPCSE 


This chapter will give the user of the National 
Communicaticns (NC) mcdule a general overview of the ccntex+ 
in which NC operates and the information necessary to inter- 
face with the NC module. It is important to note thata 
user cf NC is considered to be any person or process that 
must ccmmunicate with NC. 

Tke intent of this user's manual is to describe hew NC 
and its users interact, but net why they operate as they do. 
Reasons fcr, and alternatives to, the mode of operation 
discussed in this chapter will be covered later in chapter 
a 


Be OFERATICNAL CONTEXT 


feteicecelt that in order tO dain an appreciation of the 
mut etfaces to NC, cne should first understand the overall 
context in which NC cperates. This section is designed to 
give a more detailed look at thé operations of the SFLICE 
mnecticnal mcdules. ELeewillealsomese pve tOumn-e Galight the 
changes that have been made *o the design of the SPLICE LAN 


Since (Ref. 1] was putlished. 


The SPLICE LAN will operate on the concert of 
sessicns set up between functional modules. Each session 
will be assigned a unique session number with that number 
being used in all messages and acknowledgements during that 
sessicn. Precedence and classification information are also 


included in the each message. Message acknowledgements can 
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Figure 2.1 SELICE Piggybacked Message Format. 


either Ee sent separately or piggybacked on any cther 
message gcing to the same destination module. The message 
format fcr a SPLICE LAN piggybacked message is shown in 
Regret? . 1. 
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Zs Server Processes 


As the LAN cperational context was being defined, 
some general functicns that are necessary when any func- 
tional mcdule processes a LAN message were identified. 
These functions have been grouped into the three server 
Frocesses described below. The intent behind these 
Frocesses is that at least one copy of each exists in each 
physical processor, and their functions are concurrent with 
those cf the functicnal modules. Tt is important to nets 
that each functional nodule will have its own copy of 


Messacée SErver. 
ae Local Communications 


Local Ccmmunications (iC) Will most likely 
consist of vendor supplied protocols for the lower two or 
three levels in the ISO model. It will be present in all 
physical precessors as the interface to the communications 
BS LC will be invcked by ths Message Server on behalf of 


the functional mcdule desiring to send a message. 
bk. Buffer Manager 


This process will handle allocation and dealio- 
Saci10n Of Husters, keeping a table of active and inactive 
memory space. Ifa functional module runs our of its preal- 
located memory, che Euffer Manager (BM) 111 automatically 
request shared storage from the Resource Allocator. The 
Message Server will be the the process which uses BM the 
most. NC will also use it for deallocatior of DDN message 
tuffers. 


Ce MeSsage Server 


+od 


The Message Server (MS) is a group of rel 


a 
message handling functions that will be colocated with each 
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functional module. Gvessuncelenal nodule will ~initiate a 
Iccal send with a pointer +o the buffer containing the 
message to Fe sent. MS then will take over, adding infcrma- 
tion frovided to it Ly Session Services at the beginning of 
the current sessions This information consists of a session 
number, a precedence, a classification, and the scurce and 
destination addresses. MS will also add the message number 
and then put the message on its applicable precedence queue. 
Interactive message queues will be separats from deferred 
messag¢e queues, with interactive queues peing served before 
deferred queues of the same precedence. When the message 
comes tc the front of the qu¢eue being serviced, the message 
will be given to LC to be sent out on the LAN communicaticns 
bus. MS will handle assembly and disassembly of amulti- 
fragment messages, maintaining control of an cutgoing 
messace until the last fragment has been acknowledged. When 


the message acknowledgement arrives from the destination 


rrocess, MS will deallocate the message buffer. Dupend ce 
pericd between a message and its acknowledgement, ne new 
messages may be sent in that particular session. If the 


message remains unacknowledged after an appropriate *imecut 
period, MS will retransmit the message. If no ackncewledge- 
ment is received after retransmitting the message twice, MS 
will infcrm Recovery Management and Session Services of the 
nonrespcnding functicnal module. Session Sezvices will 
rrepare an error message for Terminal Management to present 


to the user and the session will be aborted. 


This section provides a general overview of the 
SPLICE functional modules and how they interact. ce 2c Or 
meant as a cemprehensive view of all the modules’ functions; 
therefore, many of the details are left for future theses. 


In each functional mcdule section is a general description 
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cf how it handles a message and sets up and maintains a 


eessicn. 
a. Session S¢rvices 


A SPLICE session can be defined as a netwerk 
activity which involves two or more functional modules, all 
reacting to the same message or set of messages. A session 
is initiated by an cpen message to Session Services (SS) 
from cne of the functional modules. In most cases the 


sessicns will be initiated by Terminal Management, but there 


may re cccasions when another module 2.da, LDatabase 
Management) is allowed to initiate the session. During the 
process cf setting up the session, SS wo LOOke up tn 2 


logical and physical addresses of the destinaticn process 
and det2rmine if it is reachable. If it is not reachable SS 
will handle the sessicn through a mailbox, where it will 
store the user's messages and try to send them later. 5038 
the destination is reachable, SS will adda new sessicn to 
its sessicn tree, assigning a unique session number tc it. 


Frecedence and classification of the session will be deter- 


Mined by sourc2 prcecess specification, OE yiby 12S twerk 
default. €S will send the addresses, *he session number, 
the precedence, and the classification to the source and 


destinaticn processes, where they will be stored by the 
respective Message Servers. Sessions with remote frocesse¢s 
outside cf thea LAN will be handled through NC, and will be 
discussed in more detail later. When the session is set up, 
Ss has ne further interaction with the ccmmunicating 
rrocessées until the session is aborted or closed. Bach 
communicating process sends its messages directly to the 
destiraticn, with the source Message Server appending the 
proper information to the messages. A close or abort 
message will cause the session to be terminated and deleted 


from the session tree. Only those processes involved ina 
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sessicn, (with tke possible exception of Recover 


Management), should te allowed to abort that session. 


bk. Terminal Management 


Terminal Management (TM) is the terminal user's 
interface with the LAN. As explained previcusly, the 
Network Virtual Reniina Lb EOtTOCOL 1S contained here, 
enabling the usez to communicata with other users on tke LAN 
regardless of the tyre of terminal they each have. 

Wen etne USSsE first attempts to log on, TM will 
verify the user's password, and if it is correct, the user 
will be allewed to create a session with the functional 
modules cf the SPLICE Network. When opening a session, the 
user will be asked tc give the classificaticn and precedence 
levels that are desired for that session. Once the classi- 
fication and precedénce levels are set, they will ctemain 
fixed thrcughout the entire session. If the user is author- 
ized <0 cperate at the levels he requests, he will be 
allowed tc kegin sending session messages. Pees ye Wiel Mob as 
convert th¢ user's messages t*t0 Network Virtual Terminal 
format and then notify Session Services of the user's inten- 
e2ons. If the user wants an interactive session, a full 
duplex ccnnection will b@ set up with the destination func- 
tional mocdule. If the user wants a deferred session, TM 
will depcsit the message into the appropriate mailbox and 
request SesSion Services sé*+ up a session between the 


mailbcx and the destination functional module. 
C. Recovery Management 


This module will handle LAN error conditions, to 
include all the error messages from functional modules 
reporting a nonresfending destination module. RECcovery 
Management (RM) will check the status of the questionalle 
module, and infcrm the Network Management Center (NMC) if 
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the module is no longer reachable. RM will alse be 
receiving periodic urfdate messages from the NMC concerning 
the status cf all the cther LAN's within the network. These 
changes will be entered into the Network Services Directory, 
to which RM will be the only module with write access. RM 
will have built into it a statistics gathering process that 
Will either actively or passively obtain LAN and DDN infor- 
mation that might be required by the NMC. Opel'ts thesis 
[Ref. 8] ccntains a detailed discussion onthe possible 
implementaticns cf the statistical portion of RM. Rew led: 
also ke responsible for routine or emergency backup of the 
LAN state for recovery purposes, anda graceful shutdcwn of 


the LAN, if necessary. 
d. Resource Allocator 


The Resourcs Allecator's (RA) main function will 
be +0 manage a pool of extra memory and disk space +5 be 
used when a process ¢xceeds its normal message buffer and 
workspace allocation. RA will bé called by Buffer Managers 


thrcughout the LAN tc obtain and dispose of extra resources. 
a ther Modules 


An explanation cf the internal operations of the 
cther functional modules, which include Database Management 
and Peripheral Management, will be deferred to later thesés. 
Their general functions are defined in [Ref. 1]. The inper- 
tant point to note here is that these functicna~ nodules 
will te sending messages threugh NC, endmene.) Tact. one o£ 
their respective message servers will be the same as has 


been descrited akove. 





C. INTERFACES TO NC 


Interfaces ~o NC can be viewed from three ceErcad 
GOntextss 

1. Interfaces for user modules physically external fron 
the precesscr supperting NC but local to the LAN. These 
interfaces entail control or data messages sent or received 
via the LAN communications bus. 

2s Interfaces fer modules physically internal tic the 
processor supporting NC. These interfaces involve parameters 
associated with either control or data messages that are 
passed via the cperating system or run time anvironment of 
the processor. 

Bie Interfaces tétween NC modules in different LANs. 
These interfaces are¢e accomplished using data messages that 
are sent or received over th? virtual circuit provided by 
the DDN. 

These interfaces form a group of user's protocols with which 
modules may access and utilize the services of NC (as well 
as other SFLICE modules). 


The SPLICE mecdules that interface with NC include 
those which need to send cr receive messages to or fron 
Pestanemesollics LAN Functional Modules (FM). Terminal 
Management (IM), Session Services (SS), Recovery Managenent 
(RM), Database Management (DBM), Peripheral Management (FM) 
and keseurce Allocator (RA) can all initiate sessicns 
(interactive or deferred) that require the interface with 


NC. Cne must consider that NC may also need to interface 


With any cf these FM's mailboxes as well. The suppert 
nodules knewn as Message Server (MS) and occas 
Communications (IC) were examined earlier. These moduiss 


play key roles in the higher level interface petween NC and 
ges obeeal FMs. 
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As discussed earlier, when an FM wants to utilize 
NC, it does so through its MS and its LC modules supperting 
the particular processor in which the FM resides. Similarly, 
NC communicates with cther local FMs through its ccry of MS 
ana LC. What is passed through each respective layer of MS 
and LC are predefined message formats (see Appendix 0D). MS 
will attempt to send the message to its correct destination 
and, in sc dcing, it will handle precedence and acknewledge- 
ments on behalf of the FM it supports. As a rule of «hunb, 
local acknowledgements are performed at the MS +o MS level. 
The basic categories of these messages provide a framework 


for discussion of the FM interfaces, and are as follcws: 
a. LAN Conticl Messages 


These messages will be routed via the logical 
Goncrct bus [ Ref. 1,7.26], and will contain a response 
Seam g wtnat Will bre interpreted by the receiving FM 
(including NC). Control messages are utilized for the mere 
criticai ccntrol acticns such as system recovery, shu+down, 
error ccnditions, etc., that demand immediat¢ action by the 
FM. For example, cne of the control messages that NC will 
send cr recéive is a session ABORT message. The NC design 
requires that control messages will b2 processed before any 


data messages. 
gr. LAN Data Messages 


These messages will be routed via the data tus 
and contain a data pertion of interest to the receiver. This 
format shculd also be used for most message/messag2 fragment 
traffic where the sender has no acknowlegements +o include 
cr "piggyktack" with the message. This format will also be 
used ky NC and the respective FM for setting up (opening) 
and terminating (closing) sessions. Additionally, Nc will 
use this fcrmat for reporting errors +o users and Reccvery 


Management. 
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Cc. LAN Ackncwledge ment Messages 


This message is routed via the data bus and 
contains re data. 1 3s wsed by the receiver of da data 
message when there are no other data messages addressed to 
the scurce functional module, on which to piggytack the 
acknowledgement. This format may frequently be used for 
Deferred sessions. 


d. LAN Piggykacked Messages 


This message is routed via the data bus. and 
combines the data and acknowledgement information described 
above. It is utilized at the Message Server level whenever 
possible. Note that the acknowlegement must also contain a 


session rumker (see Appendix D}. 
2. Inteimmal 


The NC module may be visualized as the contreller 
between the DDN (TCE module) and the LAN (MS modul?2), as 
shown in Figure 2.2. MS functions as NC*s access to the LAN 

Pas 'Grecunctz:onsS aS NC's access to tha DDN. 

The MS interface to NC is virtually identical tc the 
interface between MS and the other FMs elsewhere in the LAN. 
Parameters such as buffer pointers to messages are passed 
ketween NC and MS. Conceptually, MS is a process éxecuting 
concurrently with NC (and TCP), and communication (parameter 
pasSing) reéectween NC and MS is accomplished through the cper- 
ating system of the processor. MS, NC and TCP are perceived 
as shazing acommon memory managed by the Buffer Manager. 
Eesides performing allocation and deallocation of buffers 
for the FMs, Buffer Manager should also support deadicck 
detection capabilities. 4S is assumed to handle precedence 
and centrol messages in the same fashion as descrited 
earlier fcr NC, with data message precedence queues and a 


separate control message queue. AS contrasted with the NC to 
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mer interface, messages passed between NC and MS are not 
handled by a stop and wait acknowledgement method. 

No acknowledgements will be performed between NC and 
MS. This was felt tc be practical because NC and MS will 
likely be implemented in the same physical processor, and 
communicaticns between the FMS is supported via operating 
system facilities. 

Ccmmunications between NC and TCP will ke acccn- 
plished as for MS--through the cperating system. The TCP to 
NC interface must rest upon the minimum TCP functional spec- 
ificaticn as contained in { Ref. 6]. More details of these 
predefined interfaces are contained in subsequent chapters 
and the appendixes. SPLICE requirements, as addressed 
earlier, added the stcp-and-wait acknowledgement method. Thea 
dichotcmy of interactive versus deferred sessions is also 
Suppcerted but this HPStince.On Se NOt »present in TCP; 
rather, *he distinction is enforced by the way that TCP is 
utilized Ey NC. Five TCP commands are required: OPEN, SEND, 
RECEIVE, CIOSE and ABORT. The optional TCP STATUS command 
was nct inccrporated as part of the NC design. 


a NC =c NC Interfaces 


= => > as => = EME EES a-aoeee aeee 


The NC to NC interface is accomplished over the 
werewal Gircuz<e pErovided between the source and destination 
TCP mcdules. This interface is utilized at various stages of 
sessicns, and serves to synchronize the NC modules so as to 
reliably centrol message flow between LANs. The most tasic 
part of this interface involves the stop and wait 
acknowledgement scheme discussed previously. The scurce NC 
will ccntrel sequencing of messages to the destination NC by 
always waiting for a destination NC acknowlegement cn every 
data message. Nie tnisedet&raccs EL£rom thegerhroughput of 
the NC module, it provides another layer of insurance ufon 


the TCP guarantee of sequenced delivery. As detailed in the 
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next charter, this acknowledgement scheme does not include 


retransmission by the source NC. 


D. OFERATICN CONCEPTS 


Tc provide a graphic illustration cf the message 
flow, Figure 2.2 derficts the general relationship between 
modules previously described. LAN messages to and ftom 
Sessicn Services (SS) are required as part of opening 
sessions in each LAN. Arter the sessicns are established, 
the actual data message is routed from the functicnal modul2 
(FM), through the respective Message Server (MS) and Local 
Communications (LC), and then the source National 
Communicaticns (NC) module interjects the message through 
TCP to the CDN. Something of a reverse sequence takes flace 
at the distant LAN befcre the message finally arrives at the 


@estinaticn FM. 


Ancther graphic means of dépicting the operaticn of 
lees shcwmern ) P2gtre 2.3. Figure 2.3 was intended <«o 
describe the general states of NC, but it also captures th; 
general states applicable to intra-LAN message traffic not 
involving NC. The LISTEN state is the state where NC has 
Mimecwakezea TCP to be ready for any incoming or cutgoing 
messaqes. NC is likewise ready to react *t0 service any 
outgoing meéssagé requirement received from its MS. In 
general, a particular FM must first initiate actions to OPEN 
asessicn (interactive or deferred) with a destinaticn FM 
before any actual data messages may be sent. This requites 
an interchange of infcrmation between the source FM and SS. 
After insuring that the destination FM is reachable, aS 


rrovides the déstination's physical address to the scurce 
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Euguece 2.3 LAN - NC State Diagran. 


FM's Message Server. After the destination FM acknowledges a 
new sessicn requirement, the state changes to ESTABLISHED 
during which the data message flow is accomplished. 

The exception to this sequence of steps is for an 
incoming (from the DCN) deferred session requirement. For 
this, the scurce NC will actually be sending the first data 
message to initiate a deferred OPEN in the destination LAN. 
The destination (receiving) NC then sets up a deferred 
sessicn with the destination FM's mailbox and finally 
acknowledges the source NC. This changes the state to 
PORAELESEED . 
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Cne should nete the two actions which change the 
Seacc ESCM ESTAR «0 LISTEN. In cne case, NC has just 
received a "Deferred Close (IN)" message on a deferred 
sessicn. If this message is found to be in proper sequence, 
the receiving NC kncws that it has already received all of 
the stream cf messages or message fragments associated with 
a deferred session. No more messages will follow. The 
destinaticn NC can thus acknowledge the source NC and then 
return to the LISTEN state. There is no need for the desti- 
Heebon NC tc cycle through the CLOSE state. In the cther 
case, NC has just received an ABORT, and like all cther 
ABORT precessing frem other states, NC takes expediticus 
acticn te terminate activity on that session, and returns to 
the LISTEN states. Analogous to [TCP actions, NC do¢es not 
acknowledge ABORT messages. ABORTS may be cailed as a result 
ef scurce cr destination user processes, TCP or DDN interac- 
tion or cther causes such as LAN shutdown or recovery. 
Under these ircumstances, acknowledgement of an ABORT is 
not necessary or may even be undesirable. 

The other state changes are more intuitive, based 
upon é€ither user CLOS¥F or ABORT messages. This state diagram 
is not méant to reveal the finer details of how NC acccn- 
plishes these changes in state. Subsequent chapters will 
explore these details, and Appendix B examines the details 
om full. 


Tc exhaustively catalog the various probable errers 
is beyend the scope cf this thesis and the level of design 
at this stage of the project; however, a general descriftion 
cf errors and error handling is provided for NC users. 

Mest errors fall Bien aire: one eee general 


categcries--~fatal and non-fatal. 
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Ae Facer rors 


These errers characterize a state where no 
further useful processing can be dons. One should fut this 
notion in the context of each individual user session 
instead of a fatal error to the entire processor. For the 
former, specific acticns may be <‘saken upon recognizing the 
error, and the sessicn will be ABORTed. For the latter, one 
May visualize that RKecovery Mangement would have deadicck 
detection facilities and would initiate actions to rebcot 
the errceneous processor. Locally-generated errors that are 
not detected or corrected by LC or MS will be fatal errors 
(if detected) to NC. NC is also not very tolerant of errers 
detected frem the TCE interface. The fundamental acticn for 
such errors is tec infcrm the user of the error, reéerort the 
error +c Recovery Management and ABORT the session. 


bE. Non-Fatal Errors 


Thes2 errors are ones from which recovery is 
very likely. Such is the case when LC does not get an 
initial acknowledgement on @ message sent, MS receivesa 
duplicate ccpy of a message, or Buffer Manager runs out of 
dedicated tuffer space. The processin Situation has 
degraded, but may be continued. For NC, almost all localily- 
generated ¢ezrors should be detected by its LC or MS modules. 
Furthermcre, NC has virtually no capability to deal with 
such eérrers except tc treat them as fatal and sequence 
through the ABORT outlined previously; however, on the cther 
side cf the NC gateway, NC does have a limited capability <*o 
deal with one TCP =f EO. VinswbeLCcLlent Resources" 
[Ref. 6,pp.54-58 j. Bor th@secondit2on, NG can actempt, “at 
leas. twe mere times, to Ffe-invoke TCP. If those attemp¢s 
are unsuccessful, the error becomes fatal and NC initiates 


an ABCRT for the session. 
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IIT. NATIONAL COMMUNICATIONS MODULE DESIGN 
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A. INTRODUCTION AND CESIGN METHODOLOGY 


This chapter will examine the major design decisions 
that were made while deriving the National Communicaticns 
(NC) module. Several design decisions were first required to 
build a detailed concept of overation of the LAN, and these 
decisions fcrmed a kasis fer determining how NC should be 
@enscructed tO interface with the LAN. Similarly, a concise 
determinaticn of hew TCP functioned was needed before NC 
could be designed tc access and be accessed by the DDN. 
Indeed, the NC design is largely shaped by the nature of its 
inputs and cutputs tecause these must dovetail with both 
SPLICE and DDN désign speci fications. 

The déesion msthedclogy employed for this task was based 
on a structured analysis approach. The primary d¢sign aid 
utilized for this methodolcgy was HIPO, which stands for 
Pecearecny, Plus Input, Process, Output [BRef. 9]. HIPO had 
previcusly teen used for the SPLICE project, [Ref. 10] and 
(Ref. 11], and provides a flexible medium for expressing 
sequential designs for inpu«= and output oriented systems. 
Detailed HIPO diagrams are provided in Appendix A. The 
underlying basis of the HIPO technigue was functional déeccn- 
POsiticn in a tcp-dcwn approach. Also, scme Infcrmation 
Hiding désign concepts, {Ref. 12] and [{Ref. 13], were used, 
aS @pcrreeriate. These concepts are particularly desiratle 
when one considers tke need for SPLICE modules to be easy to 
modify. Changes to SFLICE operations such as message fcrmat 
fedtidacaenon are lzkely to Gecur over time. Effective modu- 
larizaticn in the deéesign phas® will minimize the impact 


later on for such changes. This was one of the reascns, for 
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example, anew server process known aS Message Server was 
abstracted cut of the design of the LAN. 

One cf the other products of the NC design effort was 
the develcprent cf pseudo code (Appendix B). Additionally, 
an attempt was made to place the sequential HIPO design into 
a ccncurrent and multi-tasking environment by using the 
programming language Ada (Appendix C) as a Systems Design 
Language (SDL). HIPC charts, pseudo code and the Ada SDL 
were the end products of the design. The rest cf this 
chapter will highlight the key design decisions that were 


made in the process of developing those products. 
B. LAN FUNCTIONAL RECUIREMENTS IMPOSED UPON NC 
1. Interactive vs. Deferred Message Traffic 


Cné of the btaSic assumptions made about SFLICE is 


that there will be koth interactive and non-interactive 


(deferred) message traffic present in the network (s¢e 
ellaprer i). It is logical to assume that users will some- 
times want to get a response right away, whereas, cther 


tines, they will have neither the time nor the inclination 
Bouwalt £Cr the answer. 

An example of an interactive s2ssion is one in which 
a <t¢rminal user calls up the Database Maragement (DBM) 
feagute mec find Out the current status of a stock iten. The 
message is sent to DEM, which responds quickly by sending a 
méssace containing the information requested to Terminal 
Management (TM). TM then presents it to the user in the 
ovrop¢r screen format. 

Examples of deferred sessions include those in which 


a terminal user has a large number of transactions to be 


rrocessed ina batch mode by one of the functional modules 
or by the background host processor. He might also want to 
send some “gail" to another terminal user, requesting his 
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assistance cn a froblen. In these deferred examples, thn2 
users do net need instant response--an answer in several 
hours is probably sufficient. In the case of database 
updates, a response may not be required at all. 

Cne way to handle interactive and deferred traffic 
is to require no distinction between them. Fach message of 
a certain precedence is put onto the a Single queue of that 
precedence, regardiess of lts session type (deferred or 
mBecTceractive). Consider, however, the case when a user 
releases a large ~outine deferred message of several hundred 
transactions just prior to another user attempting tc senda 
short reutine interactive message. The response time for 
the interactive user would degrade to a point where he might 
Walt several minutes before he gets any response at all. 
Opening a séssion is even more critical, especially when the 
traffic vclume is heavy and there are few resources left for 
creating lccal connections on the ODODN. An interactive 
sessicn clearly shculd get priority over any deferred 


sessicn. 
@. Interactive First, Deferred Second 


With both interactive and deferred traffic 
competing fcr resources, it becomes necessary that the two 
be KEEt serarate. Interactive messages should gqez quick 
response, whereas deferred traffic can wait. 

Two sets ot message queues have been developed 
Within NC and the Message Servers. These queues handle the 
interactive vs. deferred distinction. A session will be set 
up as €ither deferred or interactive with a certain prece- 
Gence. If the sessicn happens to be deferred with a rcutine 
precedence, all its wessages will go to the deferred rcutine 
queue. Ali interactive routine messages will get serviced 
from their gueue befcre any deferred routine messages, sincea 
+he interactive and deferred routine prcedence queues are 


completely separate. 
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E. Direction of Message Flow 


Another distinction between interactive and 
deferred sessions is the direction of the message flow. 
While interactive flcw will be bidirectional, deferred will 
be unidirectional only. This difference is somewhat blurred 
with messages sent over the DDN. In the DDN, TCP sets up a 
full duplex connecticn with all virtual circuits, anda = 
would be easy tc begin sending messages for both types of 
sessions as soon as the local connection was established. 
This can be done even before the destination functional 
module has been informed that there will be incoming 
messages for it. The messages would simply arrive at the 
remote LAN's NC and kFe sé@nt out over the LAN bus with the 
destinaticn's address on them. Consider, however, the case 
where the destinaticn process is initially unable to respcend 
to the interactive messages for one reason or another. The 
source mcdule must take the time to send three transmissions 
of the same message before it knows it can abort the 
sessicn. The source frocess should not have to wait for the 
message timeout and retransmission cycle (which could take 
several minutes), tc find out that it will not ce able to 
open a session. 

To eliminate the possibility of opening an 
interactive session when the destination is unreachable, 
there will be an eénd-to-end acknowledgement during the 
sessicn cren phase. In other words, before any session 
meéssages can be sent, both local and remote modules must be 
ready tc receive. 

On the other hand, deferred traffic does nor 
need this handshaking. Traffic 1s only one way and there is 
alse decapacility to deposit incoming deferred traffic in an 
inactive process's mailbox until he becomes active again. 
This mailbox capability will be discussed ir more detail 


under tne Message Server. 
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2. Server Prlocesse 


NC, like tke other functional modules, must take 
several acticns each time it sends or receives a message. 
One way to handle these message functions is to imbed then 
in @ach of the functional modules. This might be a viable 
alternative in the future; however, there are two main 
reasons that these functions have been kept separate during 
the current design of NC. First, these actions are ccmmon 
to all tke functional modules, and NC is the first func- 
tional module to reach the fermal design phase. Keeping the 
message functions separate will facilitate the design of 
cther functional modules, since the message handling func- 
tions need only be developed once. Second, these actions 
depend a great deal cn the specific hardware or operating 
system of the processor on which th2 functional medule is 
running. Keeping the message functions separate allows high 
level interfaces to re built now, while deferring the devel- 
Ccpment of the physical interfaces until the implementation 
phase. 

The above reasoning led to the development cf the 
server process called the Message Server. It ls recognized 
that the actual SPLICE LAN provided by the vendor might 
implement many of the Message Server's functions. Po ons 
cccurs, ~the previously defined interfaces cf the Message 
Server can be mapped directly to those of the vendor's 
network. 

The cther server processes that have been defined 
are Local Communications and Buffer Manager. All three 
server erecesses have been described in Chapter 2. 

Regardless of their eventual implementation, Message 
Server, Euffer Manager and Local Communications act as lower 
level servers for the functional modules, relieving them of 


the more mundane and trivial matters of message traffic. 
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Since messages being handled by these server processes nust 
be passed tc each of them in turn, at least one copy of the 
processes will exist in every physical processor. This way 


they can all work on the same message by simply passing the 
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Figure 3.1 Functional Module and Server Process Hierarchy. 


address cof the message buffer among then. Figure 3.1 shows 
the relaticnship among these server processes and the func- 


tional mcdules located within the same processor. 
@. Local Communications (LC) 


Ic was shown as a functional module in 
[Ref. 1,p.11] because the level of design at that time was 
such that the actual implementation of LC need not be 
considered. ime s jcw celt that LC will be the collection 


eof lower level protoccls provided by the eventual vender of 
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the SFLICE lccal area network. These protocols might even 


be prcevided on a separate microprocessor board within each 


processor. This makés any interface +o LC very system 
dependent and subject to change. Therefore, Message Server 
will previde the interfaces necessary to LC, keeping the 


functicnal mcdules separated from implementation dependent 


functions. 
rE. Message S¢rver (MS) 


(1). Mailbox Manager. 

An aSSumption made in [Ref. 1,p.41] is 
that the SPLICE LAN will have a mailbox capability. That 
is, fcr any deferred sessicn, the message can be deposited 
into a mailbox and asession will be initiated with the 
Mailkex as the source (and later the destination). To 
Sippor= thas fEuncticn, an MS will have the capability of 
Managing the mailboxes for its functional module. i225 
important tc point cut that the absence of mailboxes in the 
PeyeewGWLa LeSuke in Eh inability to send anything but 
interactive traffic, since there would be nowhere to stcre 
messages for inactive processes. There will also be times 
when a destinaticn is unreachable for one reason or another. 
If SS detects this during the open phase of a sessicn, the 
Pesach smenidid net be allowed to continue. T£ the session 
is a deferred one, there 1s no reason why the user must be 
ayemeonenco tretry later, when uS could do it for hin. 
Suppcse hewever that SS doesn't know that the destination is 
unreachakle and opens the deferred session. The message is 
sent to the destination, but the destinaticn MS need rot 
throw the message out, it can deposit the message in the 
process mailbox and cause the process to be notified of mail 


when it is reachable again. 
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(2). Session Timeout. 

Supfpese in another case, an interactive 
Sessicn has been in existance for saveral minutes withceut 
any message traffic. The session is tying up resources that 
Might ke needed for cther new or more active sessions. TO 
help alleviate this fproblen, MS will contain a “session 
timer" that will keer track of when the last message was 
sent cr received. If the elapsed time exceeds a certain 
Jimit, WS will issue an abort and notify the user of the 
fec ich. 


(3). 





ce a session is set up, thera is no nead 
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for Sessicn Services to get involved until the sessicn is 
closed cr abcrted. For this reason, SS will pass all the 
vital information to MS at the beginning of the session, so 
M@iat ss cen drop out OF the picture and let MS do all the 


work until the s¢ssicn ends. 
c. Buffer Manager (BM) 


Since [{Ref. 1,p.14] requires that each func- 
tional omcdulea have enough dedicated memory to handle at 
least one incoming message, it is important for NC tc know 
how message buffers will be allocated. Since the physical 
processors for SPLICE have not even been defined yet, itis 
not knewn how the future processors will handle memory allco- 
Cation. Therefore, Burfer Manager was developed as a 
logical abstraction cf the buffer allocaticn process, so 
that the functional modules can be designed ccnsistantly, 


even with underlying hardware unknowns or later changes. 
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3. Session Services Module 
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ae Session States 


All modules, including NC, use Sessicn Services 
(SS) each time a session is opened or closed. NC and SS 
must communicate with each other in order to set up a 
sessicn. This communication requires that NC ard SS_ go 
through a series of states in order to control the session 
meat fic. This progression from state to state insures that 
no message traffic is sent before the proper LAN or DDN 
connecticns have been made. 


ct. Fixed Location 


It should be emphasized that SS is the central 
distributer of addresses for all other functional modules in 
the SFLICE Network. Eecause of this, all other nodules must 
know how to get to SS in order to set up a session. Since 
messace traffic to SS will be handled just as any other 
traffic, all functicnal modules must know the logical and 
physical addresses of SS. This requires that SS cannct be 
physically mcved withcut modifying its address in ail func- 


tional modules that will want to send messages to it. 
c. Session Number 


Session numbers are given out by SS in crder to 
identify the messages for chat session. These session 
numbers are unique within each LAN only. There is the 
Provision fer one functional module to have several sessicas 
in operation at cne time f{ Ref. 1,pp.42-43 ]j. There is also 
the pessibility that some of these sessions are with local 
modules and some are with remote modules. It is reascnakle 
to expect that two functicnal modules will have multifle 
sessicns bketween them (TM and DBM are likely candidates). 


Unique message numbers are assigned in each LAN, but there 
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is no guarantee that a message coming from a remote LAN will 
have a message numkter unique to the destinaticn LAN. 
Thereicre, there must be a method by which thease modules can 
uniquely identify incoming messages and acknowledgements. 
One methcd would be to have NC keep a table of the message 
numbers and to which session each number maps. This method 
would create a lot of unnecessary overhead and might not be 
possible when several different LANs are communicating with 
each cther. The best solution is the addition of a session 
number field tc the SPLICE message and acknowledgement 
formats (see Figure z.1). With the session number in flace 
in every message, it becomes an 2asy task for NC tec map 
petween session number and local connection name for every 
message it handles. For outgoing messages, NC merely dces a 
table lcck-up with the local session number as ‘the key and 
then invekes TCP with the Local Connection Name corres- 
ponding tc that sessicn number. For incoming messages, TCP 
Will always return tc NC with the Local Connection Name as a 
parameter, thus alleowing NC to nap to the local s?ssion 
number. See Figure 3.3 for a representation of NC's session 


table. 
GW. Network Services Directory 


The Network Mcnitoring Center will continually send 
updates concerning LAN and functional module status to each 
LAN's Recevery Management module [Ref. 1,p.28]. Rilve abe. 
turn, will update the Network Services Directory (NSD). The 
fields in the NSD [ Ref. 1,p.40] consists of only services 
codes and addresses, but no status information. Adding 
status information enables SS to determine whether a desti- 
NMaticn is reachable during the opened phase of a sessicn. 
This gré¢atly reduces the time involved in determining 
wnether an interactive session can be opened or not. Ite 
also gives the capability of developing an online query 
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function that would inform the user of reachable destina- 
felons . The function, which might be called "STATUS", could 
inform the requester of which entities within the NSD are 
reachable. 
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Nctwonk statistics are a vital part of monitoring 
the capacity of a network. Along with the continual netwerk 
updates, the SPLICE Network Monitoring Center will likely be 
requesting periodic feedback about the LAN from Réccvery 
Management (RM). Since RM will be reporting the LAN statis- 
mucsS, it 1 logical that RM also contain the process that 
gathers these statistics. 


C. DEN-RELATED CESIGH ISSUES 


As briefly addressed in Chapter 1, @ number of 
GestolMmdecisc.OnS@were made for the SPLICE project pricr to 
meee nC decSign effort that had broad implications for the NC 
module. These will ke addressed first to provide a backdrop 


for decisicrs made dtring the course of the NC design. 
ea. NC as a [COIN Gateway 


Cne of the general ways of examining the NC 
module is tc look at how it serves as a DDN gateway module. 
To use tke term “gateway" is not consistent with ARPANET 
noticn c£& a gateway [Ref. 14]. ARPANET qatéways are 
normally implemented at the Internet Protocol (IP) level. NC 
will Fe a TCP level gateway. TCP/IP will be implemented in 
Prem SPLICr FEP, rut not elsewhere within the LAN. 
fReft. 1,p.18 }j. 

When NC receives acall from TCP concerning an 


incoming message, NC must access the buffer, and using the 





LAN message format, find the LAN addressee. Recall that the 
data portion of the TCP segment is the entire LAN messag2/ 
message fragment. When NC calls upon TCP to send a messace, 
it passes as a4 parameter to TCP the destination (SPLICE FED) 
address. The way that NC performs its operations is impcer- 
tant because it dces not perform routing in the way 
performed by most gateways. NC depends upon the fact that 
the lccal address fer the message can be found in the 


message tuffer. Note that when TCP passes the buffer 
Pointer tc NC, the buffer ccntains only the data that was 
passed to the source TCP. That data isa LAN-fcrmacted 


messace sent by the scurce NC. 

NC's gateway design will initially mean that 
SPLICE LANS can only send or receive messages to or from 
cther SFLICE sites who utilize «h2 same message format and 
hand ling sereccedures. + 1S possible that message communica- 
tLONS with non-SPLICE activities on the DDN might be inple- 
mented lat¢r. The major elements nzeded for this type of 
internetwerking are standardized message formats and ccmmon 
handling precedures (acknowledgements, session practices, 
etc.). A DON standard for internetworking of LANS utilizing 
TCP-level gateways might bé developed ata later date. 
SPLICE adecption of such a standard could lead tc gréater 
intercommunication with non-SPLICE communities on the DON. 


b. NC AssemEly and Disassembly of Messages 


Any given NC module will only receive messages 
from cther SPLICE LANs, and the message format and maxinum 
messaceé cr message fragment size will be common to ail LANs. 
TCP is assumed to be capable of accepting an cutgoing 
message (buffer) fcr a maximum size SPLICE message or 
message fragment. TCP will disassemble the LAN messag2 into 
TCP ségments before sending it conto IP for datégram service 
to the destinaticn. At the destination, TCP reassembles the 
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LAN message putting it back into the exact format that the 
source TCF received from the source NC. Therefore, NC will 
have ne requirement to disassemble or assemble outgoing or 
incoming messages. AS described in the last chapter, NC 
must, however, sequence the nessages using the stop and wait 


ackncwlegement scheme. 


D. DDN FUNCTIONAL RECULREMENTS IMPOSED UPON NC 


A basic DDN subnet requirement is that 


m...there be reliable mechanisms for assigning network 
rescurces for different user asl Sea | levels such that 
the higher priority users are assigned the use of scarce 
rescurces ahead of lower Del Oni ey users." 
(Ref. 4,p.102 


The precedence mechanisms throughout the DDN depend 
upon the correct infermation in the precedence field of the 
IP header cn DDN messages { REE. 15,pi12]. Precedence infcr- 
Metaon 22 given to IP by TCP, and TCP will use defaul< 
values if precedence is not specified by NC. Similarly, the 
DDN must re capable cf handling messages cf different clas- 
Siticaticns and does so, in part, through the use of a clas- 
Sificaticn field in the message header at bota the TCP and 
MeelLeyels TCP will use default values for classificaticn if 
Bot erovided by NC. 

There are basically three alternatives: 

e De net implement classification or precedence capakili- 
tpecwnternal tc the SPLICE LAN. 

e Igplement both classification and precedence handling 
ENS CE . 

e Implement either classification or precedence handling. 

TeeeelL ick chooses mot. to amplement all.of its DDW 
méssace traffic will traverse the DDN backbone with the 
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lowest precedence: FOOTINE. This would be highly undesi- 
rable during wartime conditions when supply actions such as 
emergency requisitions may fully justify higher precedences 
includizg FLASH. It is essential that SPLICE LANs have the 
capability to utilize the precedence méchanisms of the DDN. 
With regard to security, it is true there is no present need 
for a classificaticn field on the LAN message format; 
however, if the need later evolves for SPLICE, and classi- 
fied systems are added, then changes would have to be imple- 
mented te support a new message format. Implementation at a 
later (operational) stage of SPLICE would be far costlier 
than previding fcr that classification capability now. The 
addition of two extra fields to the message fermat will 
result in n¢gligible overhead to SPLICE. Recall that a user 
will establish his precedence and security levels at the 
outset of asession, and these remain fixed throughcut a 
given session. Default values can be used for most sessions. 

Classificaticn and precedence fields will be added 
to the SFLICE message format. Procedures to supvort proper 
handling of classification and precedence wiil be integrated 
into all apflicable SFLICE modulés. 


2 ee SEAT 


The TCP command named STATUS provides status infeor- 
Boe lLen (6h the particular local connection requested 
(eset. 6,5.49 }. This is an optional command which means its 
implementation is net required by the vendor implementing 
TCP. The information returned from TCP may include the items 
SHOW ime Figure 3.2. 

With regard to NC, a decision must be madé abcut 
whether tc implement routines to utilize the TCP STATUS 
command. If NC deés provide the routines to utilize the 
STATOS ccmmand, and th2 vendor does not implement them in 


TCP, the routines wceuld have to be modified to avcid a ICP 
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: 


Local Socket 
Foreign Socket 
Lccal Connection Name 
Receive Window 
Send Window 
Connection State 
Number cf Buffers pee aed eennee tc emnent 
Number cf Buffers Pending Receip 
Urgent State 
Precedence 
Securit y/Compartment 
Transmission Timeout 


{Ref. 6,pp.49-50 ] 


a A ABI gS ti SE em 


- 


Figure 3.2 Information Returned by TCP STATUS Command. 


error. If the vendor implements and NC provides access, then 
an additicnél amount of overhead is levied on NC and TCP 
every time the ccmmand is utilized. On the other hand, if NC 
does not implement but the TCP vendor does, the user will 
not have the benefit cf the information. Also, there is the 
advantage of no additional overhead induced on NC or TCP if 
the ccmmand is nct supported. 

Cne may also argue how useful the STATUS information 
Hoece the 2Crmal SPLICE user. While the informaticn may bs 
useful fer debugging purposes or for personnel maintaining 
she ccemputer system, Almost all of the data shown in Figure 
Bae ewiloeenece DE wanted by the typical SPLICE user. More 
often, a user will te interested in whether a particular 
destination is "up" or reachable via SPLICE. As discussed 
earlier, @ query capability should be added to Session 
Services sc that users can check the Network Services 
irectory (NSD) for user information. Similarly, a user may 
query to oktain infcrmation about his particular sessicn. 
such a QUcEEY Capability would not detract from the perfer- 


Mance cf TCP or NC. 
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NC will not implement the routines to utilize ths 
eCpeiaonal TCEwSPATUS command. 


J. wRlessage Rotransmission by NC 


[Sa ee So es eee 


3 


The SPLICE design requires NC to employ a stop and 
wait acknowledgement scheme. Under this method NC sends, via 
ICP, each cutgoing message or message fragment and waits for 
an acknowledgement tefore sending the next message in 
sequence. Underneath NC, TCP has taken the message provided 
by NC and attempts te send it to the destination TCP. The 
source TCP employs a retransmission scheme and will continue 


to retransmit, periodically, the NC message until a destina- 


tion TCP acknowledgement is rec¢ived, or the time tc live, 
associated with the message, expires. The stop and wait 
acknowledgement scheme [ Ref. 1,p.34], did not specifically 


require NC to perform retransmissions. 

A décision must be made whether NC should implement 
the reutines to perform retransmissions. If Nc performs 
retransmisSions, it will effectively be duplicating the work 
cf TCP, will be a source of duplicates, and will aiso tend 
to slow TCP down. Assuming that TCP 1S operabie, TCP will be 
perfcrming retransmissions on a specific message at the same 
time that NC would request TCP to send the same message 
again. I TCP cannot get an acknowledgement from the deéesti- 
facion TCE, then it is not possible that NC can get an 
acknowledgerent from the destination NC. fire wrcennect 10on 
Should be abandoned and the destination assumed to be in an 
EE ZOMcCOU-mercteC. be,gran fect, the sSurce TCP is not properly 
functioning, then NC should ABORT anyway and not attempt any 
retransmission. In general, retransmission should nect be 
performed at multiple levels. Analogously, NC or MS should 
not perfecrm retransmissions within the LAN if LC routinely 
perfcrms retransmissicns. 
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NC will not perform retransmission of a message when 


no acknowledgement is received. 
4. TCP Parameters: URGENT, Option 


The ICP specificaticn requires the implementation of 
Mee routines to support the “Options” and the "URGENT" 
parameters that may be optionally used by NC when invoking 
TCP with CPEN or SENT commands. The URGENT parameter is used 


"l..tc stimulate the receiver to process the urgent data 
nd tc indicate to the receiver when all currently knewn 
ata has keen received." [Ref. 6,p.41] 


Thus, the URGENT contruct allows the user to send data of a 
more "urgent" nature in the "middie" of a data stream or 
sessicn cf nen-urgent data. This aay be very important for 
real-time system users of ths DDN, but no such need is 
dictated by the SPLICE requirements. The "Options" parameter 
currently allows three alternative uses: End of Opticn List, 
No-Opeéeraticn and Maximum Segment Size [Ref. 6,p.18]. The 
use cf the parameter is optional, and is not needed for any 


known SFLICE requirement. 


Ee SUBMCCULES OF THE NATIONAL COMMUNICATIONS MODULE 


This section serves as a summary of the oprevicusly 
discussed design decisions as they have been integrated into 
the WC mcdule. 


1. General Structure 


The general structure of the NC submodules was 
largely determined by two factors. First, the assumption 
shat SFLICE will provide for interactive and deferred 
traffic, and second, that TCP progresses through various 


tates as it processes messages through the DDN. 
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The differences between interactive and deferred 
message traffic have been discussed earlier, and will not be 
dealt with again here. It is sufficient to say that these 
differences create a natural division of functions by which 
part of the structure of the NC submodules has been deter- 
Dined. 

Th 


discussed previously. The TCP states provide a framework 


M 


details of the TCP states have also been 


Bee fUEther divisicn of the deferred and interactive 
borticos. Since NC must deal with the TCP states, NC was 
designed to deal with only one state at a time. This way, 
the states cf TCP are controlled by the states of NC (see 
Reagurie 2.3) . 


2- Date structure 





Two general data structures emerged during the NC 
design. The first is the queue. There are three separate 
sets of queues used in the NC submodules. Aeguabphac 211us- 
traticn cf these queves can be found in Appendix C, figure 
Gat. 

The first set of queues consists of one queue for 
each open session. This is a result of the required NC to 
NC acknowledgemert fcr each session. NC must queue up any 
walting messages in acertain session until an éeckncewledge- 
ment is received from the remote Nc for a previously trans- 
mitted message in that session. This first set of queues 
funnels messages to the other two sets, never allowing more 
than one unacknowledged message per session at any given 
time. Cf course, there may be many unacknowledged messages 
bketween any givén pair of NCs, but only ene per sessicn. 
thie Cre@mw2s2on Amposes no Testriction on the possibility o£ 

aving multiple sessicns outstanding between a4 pair of func- 


n 
tional mcdules. 
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The cther twe sets of queues enforce precedence--one 
set is for interactive messages, the other for deferred 
messages. These queues are necessary because of the 
distinction batween interactive and deferred sessions. The 
precedence queues insure that the session message with the 
higkest pgricoty is given to TCP first--with the interactive 
messages given a higher priority than deferred massages of 
+he same precedence. TCP has mechanisms to handle prece- 
dence, but does net distinguish between interactive and 
deferred sessions. 

NC does not gueue any messages sent threugh Message 
Server, since MS already has precedence queues in it. 

The seccnd data structure present is the session 
mable. mes Structure iS Shown in Figure 3.3. The session 


number ard liccal connéction name entries are used to map the 





7 7 7 _ Pyne | 
= | 
| Remcte NC} Sessicn Viboc Conn } Sent { Received | | 

Address ] { Name | Last | Last 

| ————— + ——— ee 
| { | | | | 
{ { | | | 
| | { | { | 
eo 00lC—s—“SOSSNCNSNSCiéz 
{ 
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Figure 3.3 National Communications Session Table. 


messages tc their proper destinations. The remote NC 
address is necessary for opening and closing a sessicn, when 


ene, two ne s Will be communicating directly. 


3. General Functional Flow 


7 SP aa SP we 2S Ge: 4 See a a 


In summary, there are essentially three factcrs that 


determine hcw a message is treated by NC. 
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1. Whether the message is incoming from or outgoing to 
the DDN. 
2. Whether the message 1s interactive or deferred. 
3. The particular state in which the session is cper- 
acca niGg/. 
These three factcrs are well pronounced in the algerithnic 
descripticn of NC (Appendix C). The main module of NC 
(NC_MAIN) examines the messages coming from Message Server 
or TCE and determines which submodule to call. When the 
proper sukmcdule is called, it will use the sessicn number 
ox LC Nawe cn the message to map it to the proper destina- 
tion. The submodules themselves handle NC-NC level acknowl- 
edgements. 

The Error-Handler is invoked when TCP errers are 
passed tc NC. Almest all TCP etrors will result in the 
session kéing aborted and the user notified as such. 
Detecticn cf any LAN errors will be the responsibility of 


the Message Server. 
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IV. NC IMPLEMENTATION ISSUES 

The present NC design has been detailed to the level of 
a bread algcrithm, and should provide an implementor with a 
general “klueprint™ fer an executable process or series of 
processes. This chapter is meant to express some issues that 
will need to be resolved or dealt with to fulfill the 
design. Indeed, the resolution of some of these issues may 
require a careful restructuring of the design. 


A. A MULTITASKING -ENVIRONMENT 


The present design has primarily dealt with a seguential 
model of the executicn of NC. As discussed in Appendix FE and 
elsewhere, it is believed that the design structure can be 
Mapoed intc various structures that support multitasking. 
Given the stop-and-wait acknowledgement scheme, the handling 
cf precedence and the time delays associated with DDN 
traffic, NC should be heavily oriented towards concurrency 
mechanisms. Far greater message processing efficiency may be 
obtained if NC services or multiplexes several sé€ssions 
Gencurrently. 

As detailed in ({ Ref. 7], obtaining protocol efficiency 
may alsc require an implementation to reiy heavily on the 
FEP operating system; however, this may not be desiratle 
from a software maintenance standpoint, as changes or new 
versicns cf& «the operating system may cequire modification of 
NC. 

Ancther consideraticn involves how TCP/IP will be 
supported. As will be addressed shortly, TCP/IP may be 
implemented on an "cutboard" microprocessor. An outboard 


Micreprocesscr is a dedicated microprecessor eéxectting 
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ICP/IF that may be installed within the FEP and it would 
probakly ccmmunicate with NC via the internal data or 
Gentrcl bus of the FEP. This may greatly reduce the DDN 
protocol overhead in the SPLICE FEP, and NC and its Message 
Server cculd support an even higher number of concurrent 
sessicns. This may, in turn, produce a bottleneck for access 
PomanGmired@stne Cuthbcard computer. In short, good perfer- 
Mance in a multitasking environment is likely te require 


considerabl¢ tuning. 


Be. TCE/SIF IN AN OUTEOARD COMPUTER 


As mertioned in the previous section and in Chapter 1, 
one probakle implementation of TCP/IP may be an cutboard 
computer to the SPLICE FEP. Microprocessor-based Host Front 
Ends (HFE) are likely to be commonplace on the DDN and seme 
prelirinary work has already begun on such an implementation 
by the Naval Telecommunications Automation Support Céenter 
(NAVTASC). ites tyece Of TCP/IP AFE should off-lcad the 
SPLICE FEP and t+hus provide more resources to the resident 
processes of the FEP. One can also anticipate the possitle 
G@sedavanetages Of <Zhis approach. The Input/Output forts of 
the FEP can be pctential bottlenecks t0 the overall 
beeowenpuc CL the LAN to DDN interface. Scme irplementa- 


tions may 


‘.m.end UE copying the data because there is no shared 
memory ktetween DroceEsSsOrs, and the data must be moved 
Lecmr pece-=s 2C process Vila a kernel operation. Unless 
the amount of this activity is kept se teen under 
Saolcsceee 20 Weal Guecklty bécome the major performance 
bottleneck." (Ref. 7,p.11} 


One final point is the requirement to provide an inter- 
face ketween NC and TCP. Although this will probably entail 
the use cf the operating system (kerneis) and the communica- 


tions bus tetween processors, another layer of intarface 
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tromeaines amd calls will have to be built into NC, <the cper- 
ating system or another separate process. Such interfaces 
can also lead to possiktle bottlenecks. 


C. LANGUAGE ISSUES 


As various SPLICE module designs approach the froint of 
actual implementation, the choice of imlementation language 
must ke carefully made. The SPLICE Request For Prerposal 
(RFP) allews for either Pascal or Ada for the systen 
programming, and COBCL for the applications modules. 

Fer a number of reasons, any use of Ada for implementa- 
tion in the near term is probably ill-advised. The language 
was fcund toe be a superior System Design Language (SDL), and 
a number cf government ccntractors hav2 already embraced its 
use as a Programming Design Language (PDL); however, it may 
be a year or two until good production compilers and cther 
essential tccls are available. MOre 2npercantly, alet of 
questions ccncerning Ada's run-time behavior remain unan- 
Swered. At ieast one study [Ref. 16], has shown that Ada has 
good pctential as a communicaticn systems orogramming 
language. 

The use of Fascal is certainly less risky, but future 
lmplementation efforts must be concerned with the pcetential 
disadvantages of the language. As stated previously, «he 
run-time environment cf SPLICE should support a high level 
of multitasking. It is highly desirable that the versicn of 
Pascal used contains built-in synchronization primitives. 
This would eliminate the need to use the operating system 
primitives, and consequently improve the machine indepen- 
dence of SPLICE mnodulés. 

Ancther impcttant requirement concerns memory manage- 
ment. Most Pascal implementations generate a fatal, frun- 


time errer when run-time storage is exceeded. Such errors 
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gust not te fatal in SPLICE and exception handling routines 
will have to be implemented in the code if not provided by 
ete Dab-1cUlar versicn of Pascal. Finally, selecting a good 
Pascal implementation must also entail a detailed look into 
the prcgtamming SUPpOort environment usable with the 


language. 


D. INCREASING EFFICIENCY 


There are several reasons why oné would want to increase 
the efficiency in messag?2 passing. Th2 reason that skould 
be paramount in the SFLICE effort is cto enable the interac- 
tive user to get the fastest turnaround possible. 

It is recognized that any interface with TCP involves a 
certain amcunt of overhead. In this regard, NC should be 
made as cptimal as possible. Som2 areas in which the 
current design might be improved include acknowledgement 
schemes, modularity issues and message buffering. 

In addition to inzprovements within NC, there may be 
areas on the LAN side in which a different approach could 
improve message throughput. Areas of consideration include 
Messace Server placement and the distribution of Session 


Services functions. 


Ee. FCLLICW-CN 2PFORTS 


The authors have attempted to provide a sound basis for 
ficeureNoeLneh cCEfores at NFS through this thesis. tes 
recommended that follow-on efforts should be immediately 
focused at develcping the server processes, initially tack- 
ling the Message Server. MS is the key to the LAN's message 
mEeaetacuard once developed, will provide a solid foundation 
on which to build the functicnal modules. Buffer Manager 
would prcekably have to be built concurrently, Due seas. s 


considered to be a much easier task than MS. 
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Cnee MS is develcred, the next logical step is to build 
T4 and perhaps DBM with a deferred capability, only. If the 
development of NC is completed during this time also, the 
tasic SPLICE Network could be tested, adding interactive 
e=artric later. | 

All cf this develcpmental effort would be greatly faci- 
litated by the use of a proper testbed. There is an exceél- 
Heme  O©PECEtUNIty fcr the use of the VAK configuraticn 
supported by the Computer Science Department at NPS. The 
department has recently installed an Ethernet capability 
connecting the VAX machines with a set of microprocessors. 
ite aadition, TCP/IF implementations are available for the 
VAX at a relatively lcw cost. Using the Ethernet as the 
Local Ccnmmunications process and with TCP available, one can 
envisicn a highly respectable testbed for the SPLICE module 
development. Once the LAN is functioning in a deferred 


mode, the interactive traffic capabilities could be added. 
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APPENDIX A 
HIPO CHARTS 


This appendix follows the HIPO conventicns used in 
Ref. 9} and (Ref. 11). The first few pages consist of 
Visual Tables of Contents (VTOC), and are followed by the 
HIPO charts themselves. The charts are sorted in ascending 
numerical order; first the functional modules, then the 
Suppert omcdules. The LAN modules other than National 
Communicaticns have keen included for the sake of ccemplete- 
ness. Only the NC mcdul2 has been expanded beyond the first 
*hree levels on the VTOC. 

During the develcpment of these charts, i+ was found 
that concurrency was very difficult to represent, sirce HiPO 
was desicned for sequential processes. However, the HIPO 
méthed has froved very usefui in the functicnal decomposi- 


Gon ct the modules. 
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APPENDIX B 
NC ALGORITHMIC REPRESENTATION 


This Appendix is a pseudo code representation of the 
Naticnal Communicaticns (NC) Modules. It is designed to 
closely conform to the HIPO diagrams in Appendix A. ce 
provides greater detail of the sequence of actions cf NC. A 


sequential execution is assumed throughout; however, che 
Messace Server (MS) and TCP processes are expected to be 
communicating processés with NC. Asesuch,= MS or TCP can 


Pcoolmcmecncunnent calls on NC, but NC is not interruptable, 
and will déal with each call in turn. The code dces not 
describe any precedence handling constructs or methods due 
to the sequential axecution assumption. To add precedence 
queues will require a determination of where breaks in the 
sequential flow should occur. At those points, the sets of 
precedence queues and control message queue should begin. 
The precéess servicing those queues would always choose the 
highest precedence message first, and would choose an irter- 
active message before a deferred one. These queues end queue 
servicing méchanisms appear in the next appendix, but they 
are essentially provided by built-in language constructs 
defined fcr Ada. 

A mere detailed state diagram is shown in figure B.1 to 
provide an overview cf the NC pseudo code. Note that NC 
closely fcllows the state changes associated with TCP 
connecticnrs. 

This design doés suggest some possible ways NC modules 
could be structured te obtain multitasking. For example, the 
submoduleées encapsulate states which are mutually independent 
Cr one ancthér. A LAN Session progresses through each state 
and can cnly exist in one state at a time. This implies that 


Z3 










TCP Exane 





User 4aorr 





TCP Passive Oren 


| Bt peop Se pe eis Cie ae) OO eee a SS a ne ee ee 
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Pigure B.1 NC Module Detailed State Diagran. 


the lower submodules, such as OPEN.Interactive.OUT, cculd be 
made intc separate processes and not merely subrecutines of 
NG Main. ij. fact, multiple copies of eéach of the 
submodules--one for e¢ach session--might be implemented. 
Another alternative is to make ablyecs NC reentrant. 
Appendix C attempts to depict NC using the Ada language asa 
Systems Désign Language (SDL). The structure uses a areat 
degree cf cencurrency based on Ada tasks. 
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This appendix was included so as to outline the many 
details associated with NC actions. It should provide a geod 


initial design fcr arn actual implementation. 


A. NC_MAIN 


Do While NC_Cperate = True 
If Messagé Server Call then 
= Interpret LAN MSG (MSG See 
- Buildyupdate Session Table Entries 
Cas2= MSG PYPE is 
Sessicn ABORT ==> Call ABORT.OUT 


Interactive OEEN RQST ==> Call OPEN. Interactive. Out 
Deferred OPEN &QS => Call OPEN.Deferred.OUT 
Ist_Deferred_Data_ MSG ==> Call ESTAS. Deferred.OUT 
Deferred Lata MSG ==> Call ESTAB.Deferred.OUT 

Gre caccauves Data MSG ==> Call ESTAB. Interactive. cuT 
Deferred CLOSE MSG ==> Call CLOSE.Deferred. OUT 
Pieeetac wave CLOSE MSG ==> Call CLOSE.lateractive.ouT 
Otherwise ==> feport Error to Recovery Management 


End Case 
na LE 
= TEE NSG CALL then 
peebecese set Ver NSG (MSG TYPE 
- Build/update Session Table Entries 
Case MSG TYPE is 
Error MSG ==> If TCP Response = 
"Connection Reset" 
Then Call ABORT.IN 
Flse If 
TCP Response = | 
"Connection Aborted due 
*co User Timeout" 
Tiyen Cali fGLeopenanaler. IN 
Else Call =rror_ Handler.oOuT 


Pad i 
TCE CPEN Connection_RQST ==> Allocate MSG_Buffer 
Issue TCP Receive 


E 
I 


Interactive OFEN ROST ==> Call OPEN.Insceractive.INn 
1st Deferred rata SG ==> Call OPEN. Deferred. in 
Deferred Data _uSG ==> Call FSTAB.Deferred. IN. 
Interactive Data MSG => Call ESTAB.Intéractive.INn 
Deferred CLOSE MSG ==> Call CLOSE. Deferred.In 
Interactive CLOSE MSG ==> Call Interactive.CLOSE.IN 
Otherwise ==> Report Error to Recovery Management 
End Case 
Enda 2 
Ena. bc 


1iZS 





aaa Or BN. interactive.ouT 


- Issue Active Open te TCP (Initiate Connection) 
- Await TCP Signal (Response) 
Case Response is 
"Tnsu ficient Resources" 
=> Attempt TCP OPEN 
at least two more times 
If still same error r2sults then: 
- Send LAN message with TCP error message 
to user 
= Send €rror pane to Recovery Management 
= Galt OUT .ABOR 
Sete We T 
gana. Lf 
Ctherwise ==> Continue 
End Case 
- Return frem TCP Active Open pleat Local Connection Name 
Cemplete Sessicn Table ENtrie 
- Issue Send to TCP (Interactive OPEN Request 
Await TCP Signal (Response) 
Case Response is 
"Tnsu ficient Resources" 
=> Attempt TCP SEND 
at least two more tines 
fe Sstiil same error results then: 
~- Send LAN message with TCP ¢rror message 
*o user 
- Send error report to Recovery Management 
- Call OUT.ABOR 
- Return 
wend Lf 
Ctherwilse ==> Continue 
End Case 
- Allccate MSG Buffer 
- Issue Receive to TCP (Prepare iene Destination 
eee ca ent) 
- Await TCP Signal (Responss) 
Case Response is 
"Insu ficient Resources" 
==> tempt TCP RECSIVE 


ae least two more times 
If still same 2rror resuits then: 
- Deallocate Old MSG_Buftfer 
- Send LAN message with TCP error message 


to user 
- Send error report to Recovery Management 
- Call OUT.ABORT 
Return 
En al tse ; 
Otherwise ==> Continue 
End Case . 
- Await Bee Lays CPEN Acknowledgement (from destination 
rocess 
; If Not Acknowledged by Default Timeout then 
= Delailocate Old NSG Burtsce | 
= oat LAN message with "NC Timeout" 
error message to user 
= end see Sat asec to Recovery Management 
- Return 2 
- Return frem TCE Receive (Interactive OPEN Acknowledgement) 
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Issue Lccal Send with Interactive OPEN Acknowledgement to 
Source Message Server : 
Aliccate MSG _Burfer 
issue keceive to TCP (Prepare for Session) 
Await TCP Signal (kesponse) 
Case kesponse is 
"Insufficient Resources! 
==> Attempt TCP RECEIVE. 
at least two more tines 
If still same e2rror results then: 
- Deallocate Old MSG_Buffer 
- Send LAN message with TCP error mnessagé 
to uSér 
Send error Eeoue to Recovery Management 


- Call OUT.ABOR 
- Return 
uiiel be 
therwise ==> Continue 
qd Case 


b. OPEN.Interactive.IN 


Issue Local Send to Destination Message Server with 
Interactive OPEN Request (Lcecal Connection Name) 
Receive Interactive OPEN Seon gaggle (Local Connection 
Name, Sessizon Number, Source Addr, Destination Addr, 
Source NC Addr) | 
Ccmplete Sessicn Table Entries 
Issue Send to TCP (Interactive OPEN Acknowledgemen*) 
Await ICP Signal (esponse) 
Case Response is 
PITsutfictent Resources" 
==> Attempt TCP SEND . 
at least two more tine 
If still same error results then: 
- Send LAN message with TCP error message 
to user 
Senos error repose tO Recovery Management 
Call OUT.ABOR 
Return 


Ss 
ic 


_End 
Ctherwise = 
¢ MSG Butter : 
eceive to TCP (Prepare for next Message) 
CP Signal (Response) 
as¢ Response is 

"TInsurficient Resources" 
== eae ctempt “FCP RECELVS. 
at least two more tines 
If still same error results chen: 


DLC Chen ue 


_End 
Ctherwise = 
End Casa 


Seto. UB 
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Dee tet erred 


a. OPEN.Deferred.OUT 


- Issue Active Open te TCP (Initiate Connection) 
- Await TCP Signal (R¢esponsé) 
Casé€ Response is 
"Insufficient Resources" 
==> Attempt TCP OPEN 
at least two more times 
If still same error results then: 
- Send LAN message with TCP error message 
to user 
-~ Send error An aees to Recovery Management 
- Call OUT.ABOR 
- Return 
End If 


I 
Ctherwise ==> Continues 
ond Case 
Renurt frome. C Ree (Local Connection Nams) 
Complete Sessicn Table | 
Respond to Session Services! Message 
Allecate MSG_ Buffer 
Issue Rec¢sive to TCF (Prepare for session message acknowl- 
edgemerts) . 
Await TCP Signal (Response) 
Cas¢ Response is 
"Insufficient Resources" 
==> Attempt TCP RECEIVE. 
at least two more times 
Tf still same error results then: 


Deallocate Old MSG_Buffter 
Send LAN message with TCP error meéessagé¢ 
to user 
- Send error Eepors to Recovery Management 
= Call Out .ABOR 


=a Re Cle a 
emg G5 
Cetherwise ==> Continue 
End Case 
- RETORN 


bE. OPEN.Deferred.INn 


oct Gd me bant Message <o Session Services (Precedence, 
Classification Local Connection Name, Source Addr, 
Destinaticn Addr) 

- Receive LAN Message from Session Services (Local 


BensuLficient Resources" 
== SeAtcem ot TCP SEND ~~ 

at jJeast two more time 

If still same error resul 

- Sénd LAN messag2 with 

to user | 
- Send error Soe. to Recovery Management 
- Call OUT.ABOR 


a 
Siecle iiss 

Ctherwise ==> 
End Case 


s 
ts chen: 

TCP error messagé 
2 


Continue 


Lass 





aout Cccawe MSG. Butter 
- Issue kheceive to TCE (Prepare for session) 
- Await TCP Signal (Response) 
Case Response is 
"Insufficiert Resources" 
==> Attempt TCP RECEIVE. 
_ at jeast «+wo mere times 
It still same error results then: 
movie. HOGa te (Old MSG Butter 
- Send LAN message with TCP ¢rror message 
=o user 
- Send error report to Recovery Management 
eae OU. ADO 


- Return 
POT) Giaeall © . 
Ctherwise ==> Continue 
End Case 
- pete Local Send (Session Number, Destination) 


Ge LOLAELISHED 


Geis Davee nteractive. curt 


=a Pog number to Local Connection Name in Session 
Taole 
- Issue Send to TCP (Outgoing LAN message) 
- Await ICP Signal (hespense) 
Case kesponse is 
Eusdceiezence Resources" 
==> Attempt TCP SEND 
at least two more times 
Tf still same errer results then: 
- Deallocate Old HSG_Buffer 
- Send ean message with TCP errer message 
o user 
- Sénd errer Be onc to Recovery Management 
- Call OUT.ABOR 


- Return 
Sonam .f 
Ctherwise ==> Continue 
End Case 


- Await Acknowledgement from Remote NC __. 
If Net Ac ee oo by Default Timeout then 
-~ Deallocate Old MSG _ Buffer . | 
- Send LAN me ssa ge Siren Neato meouc® 
2rrer message to user 

Seema ert Cr eee to Recovery Management 

- Call OUT.ABOR 

aoe Cur f) 

Boa 2c 
Ucdat¢ Session Table 
tain MSG _ Buffer 
Issue Receive to TCF (prepare for next message) 
Await TCP Signal (Response) 
Case Response is 
"Insufficient Resources" 
==> Attempt TCP RECEIVE. 
at least two more times 
If still same error results then: 
- Dealiocate Old MSG_Buffer 
- Send LAN message with TCP error message 


i 
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tO uSéEr 
= Send Ssrror Se to Recovery Management 
- Call OUT.ABOR 
- Return 


End @i 
Otkerwise ==> Continus 
End Case 
- RETURN 


foe. £5 boee bn teract i ve~ IN 


Map Lecal Connecticn Name to Session Number 
Verify Be eee number of fragment/message 
Issue Send to TCP (Source NC Acknowledgement) 
Await TCF Signal (Response) 
Case Response iS 
"Tnsutficilent Resources" 
==> Attempt TCP SEND 
at least two more times 
If still same errer results «then: 


- S¢nd LAN message with TCP error message 
tO «6€uuser 
- Send srror Ste ere to Recovery Management 
= Catlin OUL sAbOR 
- Return 
Penas 2. ; 
Ctherwise ==> Continue 


End Case 
meooewdalmatisG suffer 
- Issue Recélve to TCF (prepare for next message) 
- Await TCP Signai (Responss) 
Case Response is 
"“Insuificient Resources" 
==> Attempt TCP RECEIVE. 


at least twe more times 
If still same erzor results then: 
- Deallocate Old 4HSG_Buffer 
- Send LAN message with TCP error message 
zo user : 
= Sena, efLor report to Recovery Management 
- Cali OUT.ABORT 
j= RE CULH 
wand if 
Otherwise ==> Continue 
End Case 
- Update Session Table 
= Beene Local Send (néw message number assigned) tc Message 
exrver 
ene 2 UR 


a. ESTAB.Deferred. OUT 


- Map Session number to Local Connection Name in Session 
Table 
Issue Send to TCP peeeecy LAN messag@) 
- Await TCP Signal (Kesponse 
Case kesponse is 
"Tnsufficient Resources" 
==> Attempt TCP SEND 
at least two more times 
If still same error results then: 
- Deallocate Old MSG_Bufter 


a, 


oa 





- Send LAN message with TCP error message 
7O «user 
- Send error report to Recovery Management 
- Call OUT.ABORT 
- Return 
pena It 
Ctherwise ==> Continue 
End Case 
- Await pee co ogement Irom Remote NC. 
Nct Acknowledged by Default Timeout then 
- Deallocate Old MSG Sea 


- Send LAN message wit C Timeout" 

error message to user 
= Send eGrrcr Beet to Recovery Management 
= Calleoul.ABOR 


zene UT nN 


Ende a 
OptainewNsG Buffer 
Issue Receive to TCP (Prepare for next messages) 
Await ICP Signal (R¢espcense) 
Case Response is 
"Insufficient Resources" 
==> Attempt TCP RECEIVE. 
at least two more times 
If still same error results then: 
- Deallocate Old MSG_Buffer 
- Send LAN message with TCP error nessage 
to user 
- Send error report to Recovery Management 
= Cali OUT.ABOR 


RETURN 


ck. ESTAB.Deferred.IN 


- Map Local Connecticn Name to Session Number 
- Verify sequence number of tfragment/message 
-~ Issue Send to TCP (Source NC Acknowledgement) 
- Await ICP Signal (Response) 

Case Response is 


- 


PPisuriicient Resources! 
==> Attempt TCP SEND 
at least two more times 
If still same error results the 
- Send LAN message with TCP er 
to user 
ae OeNGa Crt cr tt ta to Recovery Management 
~-~ Call OUT.ABOR 


Me 
ror message 


~ Return 
Sa boule Uae Gs 
Otherwise ==> Cecntinue 
End Case 


= "Gece: rmesc Butter 
Issue Receive to TCP (prepare for next message) 
Await ICP Signal (Response) 
Case Response is 
mMiTnsuzfficirent Resources" 
==> Attempt TCP RECEIVE. 
at least twc more times 
If still same error results then: 
- Deallocate Old MSG_Buffer 
- Send LAN message with TCP error message 
to user 
- Send error report to Recovery Management 
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scat IeeOUur .ADOR T 


aan © GUT 1 
meng. Lf 
Otherwise ==> Continue 
End Case 
Update Session Table 
Bees Local Send (new message number assigned) to Message 
erve 
RETUR 
ee LO r 
1. Interactive 
a. CLOSE. Interactive.our 
Issue Send to TCP (Interactive Close Reques*) 
Await Acknowledgement from Remote NC 
If Net Acknowledged by Default Timeouz then 
- Sénd LAN message with "NC Timeout" 
error message to user 
~ Send error report to Recovery Maragement 
pec cyl woud. ADCrTt 
- Return 
Bua It 
Return from TCP Receive (Interactive Clese 
Ackncwledgement) 
Issue Local Send with Interactive Close Acknowledgement to 


Sessicn Services or Source Message Server 


Issue 


Close to TCP (Terminate Local Connection) 


Delete Entries in S¢ssion Table 


Issue 


Fassive Oven to TCP (Prepare for new Connecticns) 


Await TCP Signal (Response) 
Case Response is 


RETU 


Bn 
RN 


"Insurtficient Resources" | 
==> Atrtempt TCP Passive OPEN 
at least two more times 
TE still same error results then: 
- Send LAN message with TCP error message 
+o user 


- Send error report to Recovery Management 
= RetuaA 
Pideloy ee 
Ctherwise ==> Continue 
d Case 


Ge CLOS =. Interacti ve.In 


- Issue Send to TCP (Source NC Acknowledgemen*) 
Await TCP Signal (Response) 
Case Response 1s 


"Insufficient Resources" 
==> Attempt TCP SeND 
at least two more times 
if still same errer result 
- Send LAN message with T 
tO user 
==Calt OUTTA ABDOLS 
- Sénd error report to Recovery Management 
= Return 
End If 


S then: 
CP error message 


ee 





Otherwise ==> Continue 
End Case 
Issue Clcse to TCP (Terminate Local connection) 
Send LAN Message tc Sessicn Services to delete Sessicn 
Delete Entries from Sessicn Table 
issue Fassive Bee to TCP (Prepare for new Connections) 
Await TCF Signal (Response) 
Case Response is 
"Insufficient Resources" — 
==> Attempt ICP Passive OPEN 
at least two more times 
If still same error results then: 
- Send LAN méssage with TCP error message 


to user 
- Send errcer report to Recovery Management 
= hecurEn 
EDS 1 ft 
Otherwise ==> Continue 
End Case 


RETURN 
Zoe ee nr ed 
ae CLOSE. Deferred. OUT 


Issue ICP Send (Deferred Session Close Message) 
Return from TCP Receive (NC Close Acknowledgment) 
Issue Clcese to TCP (Terminate Local Connection) 
Delete entries on Session Table 
Issue Fassive Open to TCP (Prepare for new Connections) 
pide Ler Signeai, (Ré€sponse) 

Gace Response is 

SinsutLiecLt ene Resources" 


==> Attempt TCP Passive OPEN 
at least twe more times 
Tf still same error results then: 
- Send LAN message with TCP error message 
tO user 
- Send error report to Recovery Management- 
2 Seba 
_ jmol(els ila 
Ctkerwise ==> Continue 
End Case 
RETURN 


be. CLOSE. Deferred. IN 


Issue send to TCD (Source NC Acknowledgemen*) 
Await TCP Signal (Rssponse) 
Case Response is 
"Insufficient Resources" 
==> Attempt TCP SEND 
at least two more times 
If stiil same etror results then: 
~ Send LAN message with TCP error message 
to user 

- Send error report to Recovery Management 
- Return 


Pena ; 
Otkerwise ==> Continue 
nad Cease 
1ose to TCP (Terminate Local Connnection) 
N Message tc Session Services to delete Session 
entries in Session Tabie 


a 0) Qu 
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(iusre 


Issue Fassive Open to TCP (Prepare for new Connections) 
- Await TCE Signal 
Case Response 


- AEORT 


Purg 


S 


Issue 


Cease kes 


"Tnsuffici 
i 


(Response) 
is 
ele Resources” © 
Attempt TCP Passive OPEN 
at least two more times 
Still same errer results then: 
Send LAN message with TCP error message 
to user 
Send error report to Recovery Management 
Return 


I 
==> Continue 


Session Message Fragment Queue 

ABCRT to TCP | 

Delete entries on Session Table 
Issue Fagesive Open to TCP (Prepare for new Connecticns) 
Await ICP Signal 


(Response) 


ons]. 125 


"“Tnsuftficient Resources! 


==> Attempt TCP Passive, OPEN 
at Jeast two more times 
If still same error results then: 
- S¢nd LAN message with TCP error messagé 
tO user 
- Send errer report to Recovery Management 
=) ReETUEN 
End I 
Ctherwise ==> Continue 
End Case 
RETURN 
2. ABORT.IN 
Purge Séssion Message Fragment Queue. | 
Send Control Messaqé to Séssion Services to ABORT Sessicn 


Delete entries in 


Session Table 


Tssue Fassive Open to TCP (Prepare for new Connéctions) 
Mwai Cr Signa 


Case kes 


(Response) 


oS e 15 


"TnsuEficient Resources" 


End 


Ctherwise 
Case 


Attempt TCP Passive, OPEN 

at least two more times 

Still same error results then: 

Send LAN message with TCP error message 
to user 

Send error report to Recovery Management 

Return 

ine 
==> Continue 
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F.  ERROR_HANDLER 





Case ICP Errer Response is: 
"Brecedence not allowed" or 
eSecurity/ccmpartment not allowed" or 
"Ccennection illegal for this process" 
==> Send LAN message with TCP érror message 
_ ,to user 
we Lhwetzatemyc OUT Abort 
"Destination Unreachable" 
==> Send LAN message with TCP error messag 
., <O. USE 
Pa intclate NE GOUT Abort 
"Insufficient Resources" 
==> Repeat TCP invocation (OPEN,RECEIVE cr. 
SEND) by Calling appropriate Rcutine 


(bp 


End Cass 
- Return 


LAN Message with TCP error message? to local user 
ate NC IN Abort 
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APPENDIX C 
NC DESIGN IN AN ADA SDL 


This Appendix utilizes the Ada programming langvage as a 
Systems Design Language (SDL) +o express a possible struc- 
turing cf the National Communications (NC) and other precess 
modules. Che of the key reasons for this appendix is ¢o 
Suggest ways of building a multitasking model of NC and 
other ccmmunicating processes. As such, the Ada SDL model is 
not meant tc precisely define all of the details, such as 
specific parameters cf the interfaces. 

Using Ada as a SLL allows one to build a multitasking 
design that is net dependent upon “*h2 use of specific cper- 
ating systems’ synchronization primitives. The design is 
intended tc avoid using any system dependent facilities, and 
Eoumeenao ss csaSOn, che pragma priority was not used in 
Con yu fecticn with precedence handling. The tasking 
constructs of Ada xréadily allcw one to build precedence 
handling gueues which are needed in several SPLICE modules, 
Server tasks were used to make, for example, <the task 
NATICNAL COMMUNICATICNS asynchronous from other tasks, such 
as anh instance of a task type OPEN SERVER_QUEUE. 

Provided in Figure C.1 1S a graphic representaticn of 
the key tasks in the design. Figure C.1 1s pat*erned after 
the style especused in [Ref. 17]. It is visualized that 
tasks ccncermned with enforcing precedence will utilize 
Select with guard constructs, and extensive use of the count 
attribute tc check through various entry queues. Also, one 
might expect that most of the tasks, esvecially thcse 
instantiated from the task types, would have timecut with 
terminate alternatives. With the right utilization, oniy the 


Minimum number of tasks would be active at any time. 
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Cne must note, however, that theré are a number cf unan- 
swered questions concerning the efficiency of Ada tasks. Tt 
was net th¢e purpose of this appendix to force the actual 
implementation of NC to be done in Ada. Rather, Ada was used 
as a SDL tc previde a very flexible, system independent 
means for addressing a multitasking scheme for the NC module 
and its submodules. Ada SDL can provide a consistent and 
well defined tool for expressing designs that may ultimately 
ke coded in a considerably different target language. 
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APPENDIX D 


SELICE MESSAGE FORMATS 


 ) i 


| Message Type 


Date and Time | 
| Destination adizess 





Destination Address 


| 
begaca | Physical | 
mm an ee 


Source Address { 





, 
Logical } Physical | 
| Message Number | 
| 7 Data Length | 


| Data (Response String) | 


Bee oOr Check { 


pron n EE 


Flag 


J sc ees all 


Figure C.1 LAN Control Message. 


Note that the data pertieon of the control messags 
to accomcdate a_respense string. This is especia 
when the ccntrol message is the result of an error 
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e }-~}4- 








{_ Message Type 
Date and Time 


i e @ s 
Precedence | Classification 
a ee 








| peSeena eGo Address are | 
lec daicad | Physical | 
| Source ee he | 


Legical | Physica Physical 
' Z “Number cf Fragments 














t--—_—-- —__----_-_-_-_----- ree > 
Le Session Numb 
 COCEC Cn cys 
oe, NE hee 
Fragment Number 

ae — 
| Data Length { Services Request | 
| } Code l 
me ne hr ee 
| Data | 
==> Sa SoS SS, 





Figure D.2 LAN Data Message. 


TA 











Ce _ | 
Message Type | 


fh mm a a a nee nme d 
| Dete and Tine | 





}+-——-— a nn nn oe 

Precedence i Classification | 
ta ee ee 
| Cestination Address 








: | | 

{ Logical Physical ] 
| Source Address | 
| Leqica. ( Physical 

re a ee ee 

Session Number ! 
| Message Number \ 
a ee ee ee ee me ee ee 

i Fragment Number i 
-.—————-— ———— 
| DEr on Crece zl 
| Flag | 
J ——————————————— SS | 


Figure D.3 LAN Acknowledgement Message. 
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CSS sage Typed 


Date and Time | 








SS eS ca Sa ee et 
Precedence Classificaticna | 
SS, Ee 

| Testination Address | 

| Logical Physical | 

pa ee ss a 


{ Source Address 


. 
k Eogzied |: Physical 
Number or Fragments 


a eee 


a 
Session Number | 


Fragment Number | 


{ Acknowledgement Session Number { 





Acknowledgement Message Number 


Acknowledgemen* Fragment Number | 





==> = Se a a a 
| Data Length | Services Request | 
{ { Code | 
om cere ae cee ces ene oe eS 

| Data | 
[ 7 - Error Check : 
— Flag | 
————————— se ra me ln ce Ce ert ae ee aad a 


Figure D.4 LAN Piggybacked Data Message. 
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